Full Stack Engineer - #1705

JOBSTER PRIVATE LTD.; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

JOBSTER PRIVATE LTD. in Singapore seeks an experienced software engineer to design, develop, deploy secure full stack apps and automation for risk controls monitoring.

You will translate cybersecurity and governance requirements into automated checks with human review for exceptions, own end-to-end development including UI/backend/cloud, and build dashboards for compliance status and remediation progress. AI-assisted capabilities and strong security practices are expected.

Qualifications

• Degree or tertiary qualification in Computer Science, Software Engineering, Information Systems, Electronics Engineering, Information Technology or equivalent.
• 5+ years of software engineering, full stack development or automation experience across at least three Agile/project lifecycles.
• Strong frontend and backend development skills with JavaScript/TypeScript and frameworks like React/Next/Vue.
• Experience with databases and data processing: SQL or PostgreSQL.
• API development and integration using REST/GraphQL/gRPC/WebSockets.
• Cloud deployment experience on AWS, Azure or Google Cloud, with knowledge of Government Cloud advantageous.
• Experience with DevSecOps, CI/CD pipelines, containerisation (Docker/Kubernetes) and IaC tools (Terraform/CloudFormation).
• Good knowledge of secure software development practices (JWT, IAM, API security, OWASP).
• Experience with automated testing across unit/integration/frontend/backend/contract.
• Knowledge of IT compliance, cybersecurity, governance, risk management or audit; knowledge of IM8/NIST/ISO27001 advantageous.
• AI/LLM tools, document analysis, Retrieval-Augmented Generation, workflow and dashboards advantageous.
• Experience with web scraping, batch processing, serverless, low-code, or troubleshooting security issues advantageous.
• Strong analytical and stakeholder management skills; ability to work in cross-functional teams.

Responsibilities

• Design, develop, deploy, and maintain secure, scalable and high-performing full stack applications and automation solutions to support systematic second-line monitoring and assessment of First Line of Defence risk controls.
• Translate IM8, cybersecurity, governance and internal control requirements into configurable rules, workflows and automated checks to identify compliance gaps, support timely escalation and facilitate remediation tracking, while retaining appropriate human review for exceptions and assurance conclusions.
• Take ownership of end-to-end application development, integrating responsive and accessible user interfaces, backend services, databases, cloud infrastructure and workflow functions for compliance assessment, evidence review and exception management.
• Develop dashboards and management reports that provide clear visibility of compliance status, identified gaps, remediation progress, risk trends and supporting evidence.
• Establish secure software engineering practices across all systems, including authentication, authorisation, API and frontend security, encryption, secrets management, audit logging, code review, automated testing, vulnerability management and secure deployment.
• Explore and implement Artificial Intelligence-assisted capabilities, where appropriate, to analyse documents and evidence, identify potential control gaps and improve the efficiency and consistency of second-line checks, with appropriate human oversight.
• Work closely with TGA, Cybersecurity, system owners and other stakeholders to gather requirements, validate automated checks and continuously improve solution accuracy, scalability and usability.

Skills

Frontend frameworks

Backend development

JavaScript/TypeScript

React.js/Next.js/Vue.js

Node.js/Python/Java/.NET

API development

Cloud platforms

DevSecOps & CI/CD

Security concepts (JWT, IAM, OWASP)

AI/LLM familiarity

Education

Bachelor's degree or equivalent in Computer Science/Software Engineering/Information Systems/IT

Tools

Docker

Kubernetes

Terraform/CloudFormation

GitHub Actions

GitLab CI

Jenkins

Job description

Job description

• a) Design, develop, deploy and maintain secure, scalable and high-performing full stack applications and automation solutions to support systematic second-line monitoring and assessment of First Line of Defence risk controls.
• b) Translate IM8, cybersecurity, governance and internal control requirements into configurable rules, workflows and automated checks to identify compliance gaps, support timely escalation and facilitate remediation tracking, while retaining appropriate human review for exceptions and assurance conclusions.
• c) Take ownership of end-to-end application development, integrating responsive and accessible user interfaces, backend services, databases, cloud infrastructure and workflow functions for compliance assessment, evidence review and exception management.
• d) Develop dashboards and management reports that provide clear visibility of compliance status, identified gaps, remediation progress, risk trends and supporting evidence.
• e) Establish secure software engineering practices across all systems, including authentication, authorisation, API and frontend security, encryption, secrets management, audit logging, code review, automated testing, vulnerability management and secure deployment.
• f) Explore and implement Artificial Intelligence-assisted capabilities, where appropriate, to analyse documents and evidence, identify potential control gaps and improve the efficiency and consistency of second-line checks, with appropriate human oversight.
• g) Work closely with TGA, Cybersecurity, system owners and other stakeholders to gather requirements, validate automated checks and continuously improve solution accuracy, scalability and usability.

Who we are looking for

• a) Degree or tertiary qualification in Computer Science, Software Engineering, Information Systems, Electronics Engineering, Information Technology or an equivalent discipline.
• b) At least 5 years of relevant experience in software engineering, full stack application development or automation, with participation in at least three Agile or full project development life cycles and experience supporting production-grade solutions.
• c) Strong proficiency in frontend and backend development using relevant technologies such as JavaScript or TypeScript, React.js, Next.js or Vue.js, together with Node.js, Python, Java or .NET.
• d) Hands-on experience in database design, SQL or PostgreSQL, data processing and transformation, API development and system integration using technologies such as REST, GraphQL, gRPC or WebSockets.
• e) Experience in cloud solutioning and deployment, preferably on AWS, Azure or Google Cloud; familiarity with Government Commercial Cloud will be an advantage.
• f) Experience with DevSecOps practices, CI/CD pipelines, source-code management, containerisation and orchestration, and Infrastructure as Code tools such as GitHub Actions, GitLab CI, Jenkins, Docker, Kubernetes, Terraform or CloudFormation.
• g) Good knowledge of secure software development practices, including authentication, authorisation, JWT, API security, IAM, secrets management, CSP, CORS, XSS prevention and OWASP Top 10.
• h) Experience with automated unit, integration, frontend, backend and contract testing using appropriate tools and frameworks.
• i) Knowledge of IT compliance, cybersecurity, governance, risk management or audit processes, with the ability to translate control requirements into automated validation rules.
• j) Knowledge and experience of IM8, NIST, ISO 27001/2 or other relevant ICT security policies and standards will be an advantage.
• k) Experience with Artificial Intelligence or Large Language Model tools, document analysis, Retrieval-Augmented Generation, workflow systems, dashboards or data visualisation will be an advantage.
• l) Experience with web scraping, batch processing, serverless services, low-code applications or troubleshooting application, infrastructure and security issues will be an advantage.
• m) Strong analytical, problem-solving and troubleshooting skills, with attention to data quality, control accuracy and maintainable solution design.
• n) Strong interpersonal and stakeholder management skills, with the ability to work independently and effectively in cross-functional, multi-disciplinary teams and communicate technical concepts clearly.