Secure SDLC Engineer: AI-Driven App Security Lead

Shopee; Singapore; On-site; SGD 90,000 - 180,000; Full time

Job summary

Shopee is seeking an experienced Security Engineer in Singapore to validate AI-discovered vulnerabilities, coordinate remediation with engineering, and drive timely fixes. The role will roll out the Secure SDLC across the development lifecycle, including SAST, DAST and SCA integrations to improve security quality and efficiency.

You will conduct security assessments of web apps, APIs and internal systems, design architecture-level security solutions, and build automation for security workflows

Qualifications

• Bachelor’s degree or above in Information Security, Computer Science or a related field.
• Solid understanding of OWASP Top 10 and web vulnerabilities; able to explain root cause, exploitation path, and remediation.

Responsibilities

• Validate vulnerabilities discovered by AI, communicate remediation plans with engineering teams, and drive timely fixes.
• Drive rollout of Secure SDLC across the software development lifecycle, including SAST, DAST and SCA in the development pipeline.
• Participate in security reviews of business requirements and architecture designs; perform security assessments, testing and penetration testing of web apps, APIs and internal systems.
• Design security solutions at the architecture and system level; provide security support to business lines and drive implementation.
• Build and improve security automation and tooling, including in-house AI agents for security workflows.
• Assess security of AI-powered features and internal AI tooling; address prompt injection, unsafe tool calls, data leakage and over-permissive integrations.
• Support vulnerability response and incident investigation; keep up with industry trends to strengthen security posture.

Skills

Web fundamentals

Networking fundamentals

SDLC security

Programming languages

Vulnerability research

Code auditing

Security architecture

AI security

Communication

Collaboration

Education

Bachelor’s degree or above in Information Security / Computer Science

Job description

Shopee is seeking an experienced Security Engineer in Singapore to validate AI-discovered vulnerabilities, coordinate remediation with engineering, and drive timely fixes. The role will roll out the Secure SDLC across the development lifecycle, including SAST, DAST and SCA integrations to improve security quality and efficiency.

You will conduct security assessments of web apps, APIs and internal systems, design architecture-level security solutions, and build automation for security workflows