Lead AppSec Engineer - Web3 & DevSecOps

OSL; Singapore; On-site; SGD 70,000 - 150,000; Full time

Job summary

OSL is seeking an experienced AppSec professional to perform security reviews, testing, and remediation across Web apps, APIs, and Web3 components. You will contribute to the SDL and secure CI/CD processes, and handle incident response to protect critical assets.

The role requires familiarity with OWASP Top 10, Web3 threats, and automation scripting to streamline security testing and reporting.

Qualifications

• 2+ years in AppSec or penetration testing.
• Solid knowledge of OWASP Top 10 and related web/API vulnerabilities.
• Experience with Web3 threats and smart contract/security testing.
• Ability to script in Python or Go for automation.

Responsibilities

• Code Audit & Penetration Testing of Web applications, APIs, and Web3 infrastructure (Smart Contracts, DApps, Wallets).
• SDL & DevSecOps: Drive the Security Development Lifecycle by integrating SAST/DAST automation tools into CI/CD pipelines.
• Incident Response: Handle application-level security incidents, conduct root-cause analysis, and track vulnerability remediation.
• Security Architecture Review: Participate in product design reviews to identify architectural/logical flaws and provide security hardening solutions.

Skills

AppSec / Penetration Testing

OWASP Top 10

Web3 / Smart Contracts Auditing

Scripting / Automation (Python/Go)

Tools

Burp Suite

Slither

Mythril

Checkmarx

Job description

OSL is seeking an experienced AppSec professional to perform security reviews, testing, and remediation across Web apps, APIs, and Web3 components. You will contribute to the SDL and secure CI/CD processes, and handle incident response to protect critical assets.

The role requires familiarity with OWASP Top 10, Web3 threats, and automation scripting to streamline security testing and reporting.