Product Security Engineer, Web

Rootedsec; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Shopee is hiring a Product Security Engineer, Web for its Singapore team. You will review designs and code to identify security defects, test both web apps and internal services, and build reusable detections and libraries to prevent recurring bug classes.

The role requires strong web security fundamentals, ability to read at least one backend language, and eligibility to graduate in 2027 or have up to two years of experience. Office is onsite in Singapore.

Qualifications

• Strong web security fundamentals.
• Can read code in at least one backend language.
• Graduating in 2027 or up to two years of experience.

Responsibilities

• Review designs and code for security defects.
• Test web applications and internal services.
• Build detections and libraries that remove a bug class

Skills

Web security fundamentals

Read code in a backend language

Job description

Open roleShopee# Product Security Engineer, WebSingapore· ONSITE## About the roleProduct security sits with engineering, not above it. You review designs before they ship, test what did ship, and build the guardrails that stop the same bug class coming back a third time.### What you will do* Review designs and code for security defects* Test web applications and internal services* Build detections and libraries that remove a bug class### What they ask for* Strong web security fundamentals* Can read code in at least one backend language* Graduating in 2027 or up to two years of experience### Nice to have* Bug bounty track record* Experience with Go or Java## What applying with Rooted meansThis role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.You can read this role without an account. To apply you need a Rooted credential.This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Shopee. Confirm the final details with the original source or during the application process.Posted 2026-08-12