Malcode & CBOM Development and Operations Support Engineer

PERCEPT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

PERCEPT SOLUTIONS PTE. LTD. is seeking a developer to support Malcode and CBOM initiatives, blending Python and Angular development with security assessment, remediation validation, automation, and operational support.

The role requires 2+ years of hands-on Python and Angular experience and basic application security knowledge. You will review findings, automate workflows, and generate operational reporting while coordinating with security stakeholders.

Qualifications

• 2+ years of software development experience.
• Hands-on Python development.
• Hands-on Angular frontend development.
• Basic knowledge of application security and secure coding.
• Ability to review source code, logs, and artefacts to assess findings.
• Experience with testing, deployment, and technical documentation.
• Strong analytical, troubleshooting, and communication skills.
• Ability to collaborate with application teams and security stakeholders.

Responsibilities

• Develop and enhance Malcode and CBOM capabilities using Python and Angular.
• Implement automation and workflow improvements to support analysis and operations.
• Develop integrations with security tools and repositories.
• Enhance analysis, dashboards, and reporting functionality.
• Perform testing, support deployment, and maintain technical documentation.
• Assess findings for technical accuracy, exploitability, severity, and business impact.
• Identify false positives, duplicate findings, and unsupported attack chains.
• Review source code, logs, and artefacts to validate findings.
• Validate remediation activities and conduct retesting.
• Provide advisory support to application teams on remediation approaches.
• Establish and maintain operating procedures for Malcode and CBOM initiatives.
• Manage finding lifecycle from identification through remediation and closure.
• Track remediation progress and risk disposition, including items needing review or approval.
• Produce operational reports and management updates.
• Coordinate with stakeholders and support governance reviews.

Skills

Python

Angular

Application security

Automation

Dashboards

Job description

We are seeking a developer to support the development, enhancement, and operationalisation of the Malcode and CBOM initiatives. The role combines Python and Angular development with application security assessment, remediation validation, automation, and operational support. Candidates must have more than 2 years of relevant experience, hands-on Python and Angular development skills, and basic application security knowledge.

Key Responsibilities:

Development & Enhancement:

• Develop and enhance Malcode and CBOM capabilities using Python and Angular.
• Implement automation and workflow improvements to support efficient analysis and operations.
• Develop integrations with supporting security tools and repositories.
• Enhance analysis, dashboards, and reporting functionality.
• Perform testing, support deployment, and maintain technical documentation.

Security Analysis & Remediation Support:

• Assess findings for technical accuracy, exploitability, severity, and business impact.
• Identify false positives, duplicate findings, and unsupported attack chains.
• Review source code, logs, and technical artefacts to validate findings.
• Validate remediation activities and conduct retesting to confirm that identified issues have been addressed.
• Provide advisory support to application teams on appropriate remediation approaches.

Operations, Process Management & Governance:

• Establish and maintain operating procedures for Malcode and CBOM initiatives.
• Manage finding lifecycle processes from identification through remediation and closure.
• Track remediation progress and risk disposition, including items requiring further review or approval.
• Produce operational reports and management updates.
• Coordinate with stakeholders and support governance reviews.

Requirements:

• More than 2 years of relevant software development experience.
• Hands-on experience developing applications or automation solutions using Python.
• Hands-on experience developing frontend applications using Angular.
• Basic knowledge of application security, common vulnerabilities, and secure coding practices.
• Ability to review source code, logs, and technical evidence to assess security findings.
• Experience with application testing, deployment, and technical documentation.
• Strong analytical, troubleshooting, and communication skills.
• Ability to work effectively with application teams and security stakeholders.

Preferred Experience:

• Integration with security tools, APIs, and code repositories.
• Development of analysis dashboards and automated reporting.
• Security finding validation, remediation tracking, and retesting.
• Establishing operational workflows and supporting governance processes.

EA Licence No.:18S9405 / EA Reg. No.:R1330864