Senior AI Application Security Engineer

KERRY CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting Pte. Ltd. is seeking a Senior AI Application Security Engineer to lead security across the software development lifecycle.

You will work with engineering teams to embed security into CI/CD, APIs, architecture and developer workflows, covering secure design reviews, threat modelling, application and API security, and security automation. You will strengthen security for AI-enabled features and ensure risks are addressed early in development.

Qualifications

• 7+ years in application or product security or software engineering with a security focus.
• Strong knowledge of app and API security including authentication, authorization and OWASP.
• Hands-on security controls in CI/CD: code scanning, dependency security, secrets detection.
• Experience automating remediation and assurance with security tooling.

Responsibilities

• Lead security across the software development lifecycle and embed security in CI/CD, APIs and architecture.
• Perform secure design reviews, threat modelling and vulnerability management.
• Develop security automation and secure-by-default engineering standards.
• Strengthen security for emerging AI-enabled features and multi-tenant platforms.

Skills

Secure coding

CI/CD security

Threat modelling

OWASP principles

Python

Go

TypeScript

Security automation

Tools

Python

Go

TypeScript

Job description

Overview

Our client is a fast-growing organisation in the AI infrastructure space, building large-scale platforms and software that support advanced AI workloads. As the technology environment continues to scale, the business is strengthening its security engineering capability across customer-facing applications, APIs and internal platforms.

Role

We are seeking a Senior AI Application Security Engineer to lead security across the software development lifecycle. You will work closely with engineering teams to embed security into CI/CD, APIs, application architecture and developer workflows. The role will cover secure design reviews, threat modelling, application and API security, identity and access controls, vulnerability management, security automation and secure-by-default engineering standards. You will also help strengthen the security of emerging AI-enabled application features and ensure risks are addressed early in the development process.

Requirements

• 7+ years of experience in application security, product security or software engineering with a strong security focus.
• Strong knowledge of application and API security, including authentication, authorisation, tenant isolation, secure coding and OWASP principles.
• Hands-on experience implementing security controls within CI/CD pipelines, including code scanning, dependency security, secrets detection and software supply-chain controls.
• Strong coding and automation capability in Python, Go or TypeScript, with experience building security tooling or automating remediation and assurance processes.
• Experience securing cloud-based or multi-tenant applications; exposure to AI-enabled applications, identity standards, SOC 2 or ISO 27001 would be advantageous.