Global Application Security Lead | DevSecOps & Secure SDLC

DHL Express; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

DHL Express is seeking an Application Security Manager to join our Global Head Office in Singapore (preferred) or Cyberjaya, Malaysia. The role strengthens security across the software development lifecycle, embedding security-by-design and driving secure digital solutions.

You will mentor teams in Cloud Security, web app security, DevSecOps, and CI/CD security, and run security assessments and threat modelling to enhance the organisation's cybersecurity posture.

Qualifications

• Hands-on experience in application security assessments and vulnerability management.
• Familiarity with secure SDLC practices and CI/CD security integration.
• Proficiency in communicating risks to diverse stakeholders.
• Professional certifications such as CISSP, CISM, or equivalent preferred.

Responsibilities

• Support Cyber Security Program implementation within DHL Express.
• Mentor teams in Cloud Security, web app security, anti-bot technologies, and secure coding practices.
• Lead application security assessments with internal and external entities.
• Perform SAST/DAST/IAST, SCA, and Penetration Testing to assess security posture.
• Conduct Threat Modelling to identify threats and design mitigations.
• Advise on security counter-measures with IT and business stakeholders.
• Collaborate with Corporate Functions on cyber risk and compliance.
• Represent security in reviews with global, regional, and country teams.

Skills

Cloud Security

Web Application Security

DevSecOps

CI/CD Security

Threat Modelling

Secure Coding Practices

Education

Degree in Computer Science or Cyber Security

Job description

DHL Express is seeking an Application Security Manager to join our Global Head Office in Singapore (preferred) or Cyberjaya, Malaysia. The role strengthens security across the software development lifecycle, embedding security-by-design and driving secure digital solutions.

You will mentor teams in Cloud Security, web app security, DevSecOps, and CI/CD security, and run security assessments and threat modelling to enhance the organisation's cybersecurity posture.