Secure Python Engineer: App Security & DevSecOps

Hi5 Consult; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Hi5 Consult is seeking a seasoned Python-focused security engineer to design, develop, and maintain secure applications in Singapore. You will perform security assessments, code reviews, and testing across Python-based systems, and integrate security into CI/CD processes.

The role requires deep OWASP Top 10 knowledge, REST API security expertise, and familiarity with authentication standards (OAuth 2.0, OpenID Connect, JWT). Collaboration with DevOps, QA, and security teams is essential.

Qualifications

• Proficiency in Python programming and scripting.
• Experience with Python frameworks such as Django, Flask, or FastAPI.
• Knowledge of OWASP Top 10 vulnerabilities and mitigation techniques.
• Experience with REST API security and secure web development.
• Understanding authentication protocols (OAuth 2.0, OpenID Connect, JWT).
• Familiarity with CI/CD security practices.

Responsibilities

• Design, develop, and maintain secure Python applications.
• Identify and remediate vulnerabilities in Python apps.
• Conduct security assessments, code reviews, and testing.
• Integrate security checks into CI/CD pipelines and workflows.
• Develop Python scripts for security testing and reporting.
• Collaborate with DevOps, QA, and security teams.

Skills

Python programming

Django/Flask/FastAPI

OWASP Top 10

REST API security

OAuth 2.0/OpenID Connect/JWT

SQLi/XSS/CSRF/SSRF

CI/CD security

Git/Linux

Encryption/hash/secrets

Tools

SonarQube

Bandit

Semgrep

Snyk

Burp Suite

OWASP ZAP

Job description

Hi5 Consult is seeking a seasoned Python-focused security engineer to design, develop, and maintain secure applications in Singapore. You will perform security assessments, code reviews, and testing across Python-based systems, and integrate security into CI/CD processes.

The role requires deep OWASP Top 10 knowledge, REST API security expertise, and familiarity with authentication standards (OAuth 2.0, OpenID Connect, JWT). Collaboration with DevOps, QA, and security teams is essential.