DevSecOps Engineer (Application Security)

Dragonpass; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

Dragonpass is seeking a hands-on DevSecOps Engineer in Singapore to embed secure-by-design practices across the SDLC. You’ll work with Security, Engineering, DevOps and Architecture teams to drive secure development, perform application security testing, and manage vulnerability remediation while promoting a security-first culture.

You will collaborate with Mandarin- and English-speaking teams globally, improving security tooling, threat modelling and risk assessments, and building dashboards

Qualifications

• Hands-on DevSecOps, Application Security or Security Engineering experience.
• Experience with SAST, SCA, DAST and vulnerability management platforms.
• Experience securing CI/CD pipelines and software delivery environments.
• Strong understanding of secure software development practices.
• Hands-on Java development, code review and architecture analysis experience.
• Experience with container and infrastructure security scanning.
• Knowledge of threat modelling and security risk assessment methodologies.
• Experience in FinTech/Payments or Financial Services is highly desirable.
• Familiarity with ISO, NIST, SOC2 and GDPR.
• Experience working in Agile software development environments.

Responsibilities

• Drive application security testing across the software development lifecycle.
• Manage and optimise security testing platforms including SAST, SCA and DAST tools.
• Integrate security controls into CI/CD pipelines and development workflows.
• Identify, triage and support remediation of security vulnerabilities.
• Partner with developers, QA engineers, DevOps teams and architects to improve security posture.
• Support penetration testing programmes and validate remediation activities.
• Assist with threat modelling, risk assessments and security design reviews.
• Build security dashboards, reporting and risk metrics for stakeholders.
• Develop secure coding guidance, training materials and best practices.
• Support security frameworks, compliance initiatives and audit requirements.

Skills

DevSecOps

Application Security

Security Engineering

SAST

SCA

DAST

CI/CD

Secure SDLC

Java development

Threat modelling

Job description

Please only apply if you have hands-on DevSecOps and Application Security experience within software engineering environments, including SAST, SCA, DAST, vulnerability management, CI/CD security and secure software development practices. Fluency in both Mandarin and English is essential.

Join Dragonpass at a Defining Growth Moment

We're not looking for someone who sits on the sidelines writing reports.

We're looking for a hands-on security engineer who enjoys solving problems, working closely with development teams and embedding security into every stage of the software development lifecycle.

Dragonpass is a global travel and lifestyle platform trusted by leading brands including Visa, Mastercard, Barclays and Revolut. As our global technology estate continues to grow, we're investing heavily in strengthening our DevSecOps capability and building a world-class secure development environment.

This is an opportunity to join a fast-growing international business where you'll have real influence, work on large-scale technology platforms and help shape the future of application security.

The Opportunity

As DevSecOps Engineer, you'll work closely with our Security, Engineering, DevOps and Architecture teams to drive secure-by-design development practices across the organisation.

You'll be responsible for application security testing, vulnerability management, automation and supporting engineering teams to identify and remediate security risks early in the development lifecycle.

This is a highly collaborative role requiring strong technical expertise, excellent communication skills and the ability to work effectively across both English-speaking and Mandarin-speaking teams globally.

What You'll Be Doing

• Drive application security testing across the software development lifecycle
• Manage and optimise security testing platforms including SAST, SCA and DAST tools
• Integrate security controls into CI/CD pipelines and development workflows
• Identify, triage and support remediation of security vulnerabilities
• Partner with developers, QA engineers, DevOps teams and architects to improve security posture
• Support penetration testing programmes and validate remediation activities
• Assist with threat modelling, risk assessments and security design reviews
• Build security dashboards, reporting and risk metrics for stakeholders
• Develop secure coding guidance, training materials and best practices
• Support security frameworks, compliance initiatives and audit requirements
• Promote a secure-by-design culture across engineering teams

Experience Required

• Strong hands-on experience in DevSecOps, Application Security or Security Engineering
• Experience with SAST, SCA, DAST and vulnerability management platforms
• Experience securing CI/CD pipelines and software delivery environments
• Strong understanding of secure software development practices
• Hands-on Java development, code review and architecture analysis experience
• Experience with container and infrastructure security scanning
• Knowledge of threat modelling and security risk assessment methodologies
• Experience within FinTech, Payments or Financial Services environments is highly desirable
• Understanding of security frameworks including ISO, NIST, SOC2 and GDPR
• Experience working within Agile software development environments

What We're Looking For

Security-First Mindset

You naturally identify risks and proactively seek secure solutions.

You enjoy getting into the detail, investigating issues and supporting remediation.

You can effectively engage technical and non-technical stakeholders in both Mandarin and English.

You are passionate about automation, optimisation and improving security maturity.

Influencer

You can build strong relationships and promote secure development practices across engineering teams.

Why Join Dragonpass?

• Work with globally recognised brands and partners
• Be part of a growing international technology organisation
• Play a key role in shaping Application Security and DevSecOps strategy
• Exposure to large-scale, enterprise-grade platforms and technology
• Collaborative global environment with international career opportunities
• Competitive salary and benefits package

Working Pattern: Hybrid working with 3 days per week in our Singapore office, Monday-Friday, 09:00-17:30.

We're committed to building an inclusive workplace and welcome applications from people of all backgrounds and experiences. At Dragonpass, we believe diversity drives innovation and helps us build better products for our customers worldwide.