Python Application Security Engineer

HI5 CONSULTING SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

HI5 Consulting Solutions Pte. Ltd. is seeking a Python-focused security engineer to design, develop, and maintain secure Python applications. You will implement secure coding practices, identify and remediate vulnerabilities, and perform security testing across the development lifecycle.

The role involves integrating security checks into CI/CD, developing automation tools for security testing, and collaborating with security and development teams to strengthen application defenses.

Qualifications

• Strong proficiency in Python programming and scripting.
• Experience with Python frameworks Django, Flask, or FastAPI.
• Knowledge of OWASP Top 10 vulnerabilities and mitigation techniques.
• Experience with REST API security and secure web application development.
• Understanding of authentication protocols (OAuth 2.0, OpenID Connect, JWT).
• Experience with secure coding practices and vulnerability remediation.

Responsibilities

• Design, develop, and maintain secure Python applications.
• Implement secure coding practices to prevent vulnerabilities.
• Identify and remediate security vulnerabilities in Python-based apps.
• Perform application security assessments, code reviews, and testing.
• Integrate security checks into CI/CD pipelines and workflows.
• Develop Python scripts/tools for security testing and reporting.
• Address OWASP Top 10 vulnerabilities (SQLi, XSS, broken access).
• Implement secure authentication, authorization, session management, and access controls.
• Work with security teams on SAST/DAST/SCA activities.
• Assess third-party libraries for known vulnerabilities.
• Implement secure API development practices with input validation and rate limiting.
• Support vulnerability remediation, audits, and compliance.
• Collaborate with devs, DevOps, QA, and security teams to improve app security.

Skills

Python programming

Django/Flask/FastAPI

Secure SDLC

OWASP Top 10

REST API security

OAuth/OpenID/JWT

Git/Linux

CI/CD pipelines

Docker/Kubernetes

Tools

SonarQube

Snyk/Burp/OWASP ZAP

Semgrep

Cloud security fundamentals

Job description

HI5 Consulting Solutions Pte. Ltd. is seeking a Python-focused security engineer to design, develop, and maintain secure Python applications. You will implement secure coding practices, identify and remediate vulnerabilities, and perform security testing across the development lifecycle.

The role involves integrating security checks into CI/CD, developing automation tools for security testing, and collaborating with security and development teams to strengthen application defenses.