Python Developer (Application Security)

Quantum Infotech Solutions; Singapore; Sur place; SGD 90 000 - 150 000; Plein temps

Résumé du poste

Quantum Infotech Solutions is seeking a Python security engineer to design, build, and securely maintain Python applications in a Singaporean environment. You will implement secure coding practices and perform regular security assessments, code reviews, and testing.

The role requires strong skills in Python, Django/Flask/FastAPI, REST API security, and modern authentication protocols. You will collaborate with DevOps, QA, and security teams to strengthen overall security posture.

Qualifications

• Strong proficiency in Python programming and scripting.
• Experience with Angular and TypeScript.
• Experience with Python frameworks such as Django, Flask, or FastAPI.
• Good understanding of application security principles and secure software development practices.
• Knowledge of OWASP Top 10 vulnerabilities and mitigation techniques.
• Experience with REST API security and secure web application development.
• Understanding of authentication protocols such as OAuth 2.0, OpenID Connect, and JWT.
• Knowledge of SQL injection, XSS, CSRF, SSRF, insecure deserialization, and broken access control.
• Experience with application security testing and vulnerability remediation.
• Familiarity with Git, Linux, and CI/CD pipelines.
• Knowledge of encryption, hashing, secrets management, and secure configuration.
• Understanding of HTTP/HTTPS, TLS, cookies, sessions, and web application architecture.

Responsabilités

• Design, develop, and maintain secure Python applications.
• Implement secure coding practices to prevent common vulnerabilities.
• Identify, analyze, and remediate security vulnerabilities in Python apps.
• Perform application security assessments, code reviews, and security testing.
• Integrate security checks into CI/CD pipelines and development workflows.
• Develop Python scripts and automation tools for security testing and reporting.
• Identify vulnerabilities related to OWASP Top 10 and remediate.
• Implement secure authentication, authorization, and session management.
• Collaborate with DevOps, QA, and security teams to improve security.

Connaissances

Python programming

Security

Angular

TypeScript

Django/Flask/FastAPI

OAuth 2.0/OpenID Connect/JWT

REST API security

OWASP Top 10

Git/Linux/CI/CD

Outils

SonarQube

Snyk

Burp Suite

OWASP ZAP

Semgrep

Description du poste

• Design, develop, and maintain secure applications using Python.
• Implement secure coding practices to prevent common application vulnerabilities.
• Identify, analyze, and remediate security vulnerabilities in Python-based applications.
• Perform application security assessments, code reviews, and security testing.
• Integrate security checks into CI/CD pipelines and development workflows.
• Develop Python scripts and automation tools for security testing, vulnerability analysis, and reporting.
• Identify and address vulnerabilities related to OWASP Top 10, including SQL injection, cross-site scripting (XSS), broken access control, and security misconfiguration.
• Implement secure authentication, authorization, session management, and access controls.
• Work with security teams to perform Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Assess third-party libraries and dependencies for known security vulnerabilities.
• Implement secure API development practices, including input validation, rate limiting, and proper error handling.
• Support vulnerability remediation, security audits, and compliance requirements.
• Collaborate with developers, DevOps engineers, QA teams, and security professionals to improve application security.

Required Technical Skills

• Strong proficiency in Python programming and scripting.
• Good experience with Angular and TypeScript.
• Experience with Python frameworks such as Django, Flask, or FastAPI.
• Good understanding of application security principles and secure software development practices.
• Knowledge of OWASP Top 10 vulnerabilities and mitigation techniques.
• Experience with REST API security and secure web application development.
• Understanding of authentication protocols such as OAuth 2.0, OpenID Connect, and JWT.
• Knowledge of SQL injection, XSS, CSRF, SSRF, insecure deserialization, and broken access control.
• Experience with application security testing and vulnerability remediation.
• Familiarity with Git, Linux, and CI/CD pipelines.
• Knowledge of encryption, hashing, secrets management, and secure configuration.
• Understanding of HTTP/HTTPS, TLS, cookies, sessions, and web application architecture.

Preferred Skills

• Experience with security tools such as SonarQube, Bandit, Semgrep, Snyk, Burp Suite, or OWASP ZAP.
• Familiarity with SAST, DAST, and SCA tools.
• Experience automating security testing using Python.
• Knowledge of Docker, Kubernetes, and cloud security fundamentals.
• Familiarity with AWS, Azure, or GCP security services.
• Understanding of threat modeling and security risk assessment.
• Knowledge of DevSecOps practices and security integration into CI/CD pipelines.
• Familiarity with compliance standards such as ISO 27001, SOC 2, or PCI DSS.