Secure SDLC Engineer: AI & App Security

Shopee; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Shopee's Engineering and Technology team in Singapore seeks a security-focused individual contributor to strengthen our secure SDLC and vulnerability management. You will validate AI-discovered vulnerabilities, drive fixes with engineering, and design security solutions at system level.

You will lead security reviews, perform assessments and penetration tests, and help scale security automation including in-house AI agents. Strong collaboration with cross-functional teams is essential to success.

Qualifications

• Bachelor’s degree or above in Information Security, Computer Science or a related field.
• 3+ years of security-related experience at an internet company.
• Solid web and networking fundamentals; OWASP Top 10 knowledge.
• Hands-on experience rolling out SDLC processes and security programs.
• Proficient in at least one programming language such as Java, Python, PHP, Go, C or JavaScript.

Responsibilities

• Validate vulnerabilities discovered by AI, communicate remediation plans with engineering teams, and drive timely fixes.
• Drive the rollout of the Secure SDLC across the software development lifecycle, including SAST, DAST and SCA capabilities integrated into the development pipeline.
• Participate in security reviews of business requirements and architectures and perform security assessments, testing and penetration testing of web apps, APIs and internal systems.
• Design security solutions at architecture and system level and provide security support to business lines.
• Build and improve security automation and tooling, including in-house AI agents for security workflows.
• Assess the security of AI-powered features and internal AI tooling; support vulnerability response and incident investigation.

Skills

Security experience

Secure SDLC

OWASP Top 10

Vulnerability research

Code auditing

AI/LLM security

Cross-team collaboration

Programming experience

Education

Bachelor’s degree in Information Security, Computer Science or related field

Tools

SAST

DAST

SCA

In-house AI agents

Job description

Shopee's Engineering and Technology team in Singapore seeks a security-focused individual contributor to strengthen our secure SDLC and vulnerability management. You will validate AI-discovered vulnerabilities, drive fixes with engineering, and design security solutions at system level.

You will lead security reviews, perform assessments and penetration tests, and help scale security automation including in-house AI agents. Strong collaboration with cross-functional teams is essential to success.