Cybersecurity Engineer | Contract | Bank

Manpower Staffing Services (Singapore) Pte Ltd; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

Manpower Staffing Services (Singapore) Pte Ltd is seeking an Application Security Advisor to guide development teams on the security aspects of the SDLC. You will evaluate new technologies and drive improvements in tools and processes such as SAST, DAST, SCA, and secure coding guidelines.

The role requires a Bachelor’s degree in IT or related discipline and hands-on experience with Java, Python, DevSecOps, and OWASP standards. Prior code reviews or security assessments are a plus.

Qualifications

• Bachelor's degree in IT or related discipline.
• Proficient with programming & scripting languages Java and Python.
• Knowledge of Agile, DevOps and DevSecOps practices.
• Hands-on with SAST, DAST, SCA and IAST tooling.
• Understanding of OWASP Top 10 and ASVS/MASVS.
• Penetration testing experience is a plus.
• Experience in Code Reviews or application security assessments is a plus.

Responsibilities

• Provide advisory for development/project teams on application security.
• Contribute to improvements of existing application security tools and processes (SAST, DAST, SCA, secure coding).
• Advise on secure SDLC practices including Security Requirements, Secure Design and Secure Code Review.

Skills

Java

Python

Agile

DevOps

DevSecOps

SAST

DAST

SCA

IAST

OWASP Top 10

OWASP ASVS/MASVS

Penetration testing

Code Reviews

Education

Bachelor's degree in IT or related

Job description

Job Purpose:

• The person will be responsible for providing advisory to development / project teams on the security aspects of the SDLC (Software Development Lifecycle).
• The person is expected to evaluate new technologies and processes to improve Application Security outcomes.
• The person is expected to guide application teams on Secure SDLC activities and contribute improvements to existing tools and processes, such as: SAST, DAST, SCA, Security requirements, Secure Code Review and Developer application security training.

Job duties and responsibilities:

• Provide advisory for development / project teams on Application Security.
• Contribute to the improvements of our existing application security tools and processes:SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and secure coding guidelines.
• Provide advisory on application security tools and processes: SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and secure coding guidelines.
• Contribute to the improvements of Secure SDLC practices, such as Security Requirements, Secure Design and Secure Code Review.

Requirements:

• Bachelors degree in IT or any related discipline
• Proficient with programming & scripting languages such as: Java & Python
• Knowledge and experience in the modern software development practices (Agile, DevOps, DevSecOps)
• Knowledge and hans-on experience with DevSecOps processes and tooling, such as SAST, DAST, SCA and IAST.
• Understanding of OWASP Top 10, OWASP ASVS/MASVS
• Penetration testing experience is a plus
• Experience in Code Reviews and/or application security assessments is a plus