Lead Application Security Engineer - Remote, Global Team

Reap; Singapore; On-site; SGD 120,000 - 190,000; Full time

Benefits offered by this job

Health insurance budget

Home office equipment budget

Flexible remote work options

Corporate Reap Card

Job summary

Reap is a leading global payment technology provider creating interconnected financial services. This role focuses on building and owning the application security programme, implementing secure coding standards, and integrating SAST/DAST/SCA tools into CI/CD to protect cross-border payments.

You will lead threat modelling for new features, perform secure code reviews across languages, manage OSS security, and drive security education and bug bounty initiatives in a fast-growing fintech

Qualifications

• Experience building application security programs within an engineering organisation.
• Hands-on experience configuring and integrating security tooling in CI/CD.
• Ability to model threats and communicate risks to engineers.

Responsibilities

• Build and own the application security programme: secure coding standards, training, gates, and CI/CD security tooling.
• Lead threat modelling for new features and API integrations with STRIDE sessions.
• Perform secure code reviews for authentication, authorization, payments, crypto, and API integrations.
• Own OSS security: scan, assess, and enforce the OSS usage policy.
• Run developer security education: OWASP Top 10, OWASP API Top 10 and a security champions network.
• Manage penetration testing engagements end-to-end: scope, vendors, findings, remediation.
• Own the responsible disclosure policy and bug bounty programme when launched.

Skills

Threat modelling

Secure coding

Secure code review

CI/CD security tooling

SAST/DAST/SCA

OWASP Top 10

PCI DSS

Tools

Semgrep

CodeQL

Checkmarx

SonarQube

Job description

Reap is a leading global payment technology provider creating interconnected financial services. This role focuses on building and owning the application security programme, implementing secure coding standards, and integrating SAST/DAST/SCA tools into CI/CD to protect cross-border payments.

You will lead threat modelling for new features, perform secure code reviews across languages, manage OSS security, and drive security education and bug bounty initiatives in a fast-growing fintech