Hybrid DevSecOps Engineer—Application Security

Dragonpass; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

Dragonpass is seeking a hands-on DevSecOps Engineer in Singapore to embed secure-by-design practices across the SDLC. You’ll work with Security, Engineering, DevOps and Architecture teams to drive secure development, perform application security testing, and manage vulnerability remediation while promoting a security-first culture.

You will collaborate with Mandarin- and English-speaking teams globally, improving security tooling, threat modelling and risk assessments, and building dashboards

Qualifications

• Hands-on DevSecOps, Application Security or Security Engineering experience.
• Experience with SAST, SCA, DAST and vulnerability management platforms.
• Experience securing CI/CD pipelines and software delivery environments.
• Strong understanding of secure software development practices.
• Hands-on Java development, code review and architecture analysis experience.
• Experience with container and infrastructure security scanning.
• Knowledge of threat modelling and security risk assessment methodologies.
• Experience in FinTech/Payments or Financial Services is highly desirable.
• Familiarity with ISO, NIST, SOC2 and GDPR.
• Experience working in Agile software development environments.

Responsibilities

• Drive application security testing across the software development lifecycle.
• Manage and optimise security testing platforms including SAST, SCA and DAST tools.
• Integrate security controls into CI/CD pipelines and development workflows.
• Identify, triage and support remediation of security vulnerabilities.
• Partner with developers, QA engineers, DevOps teams and architects to improve security posture.
• Support penetration testing programmes and validate remediation activities.
• Assist with threat modelling, risk assessments and security design reviews.
• Build security dashboards, reporting and risk metrics for stakeholders.
• Develop secure coding guidance, training materials and best practices.
• Support security frameworks, compliance initiatives and audit requirements.

Skills

DevSecOps

Application Security

Security Engineering

SAST

SCA

DAST

CI/CD

Secure SDLC

Java development

Threat modelling

Job description

Dragonpass is seeking a hands-on DevSecOps Engineer in Singapore to embed secure-by-design practices across the SDLC. You’ll work with Security, Engineering, DevOps and Architecture teams to drive secure development, perform application security testing, and manage vulnerability remediation while promoting a security-first culture.

You will collaborate with Mandarin- and English-speaking teams globally, improving security tooling, threat modelling and risk assessments, and building dashboards