Senior App Security Engineer: SAST/DAST, SBOM, Automation

Epergne Solutions; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Epergne Solutions in Singapore is seeking an experienced Application Security Engineer to support application security testing, Malcode and CBOM capabilities, vulnerability assessment, remediation, and security process automation.

You will work on developing and enhancing security capabilities, performing assessments, reviewing code and logs, and automating security workflows to ensure robust security across applications.

Qualifications

• Experience in Application Security Testing, including SAST, DAST, and SCA.
• Knowledge of CBOM/SBOM, software composition, and dependency risk management.
• Strong understanding of Secure SDLC and application security principles.
• Experience in source code review and vulnerability assessment.
• Scripting/automation skills using Python, PowerShell, or similar languages.
• Knowledge of security reporting, analytics, and vulnerability management.
• Strong analytical, communication, and stakeholder management skills.

Responsibilities

• Develop and enhance Malcode, CBOM, and application security capabilities.
• Perform security assessments and analyze vulnerabilities for severity, exploitability, and business impact.
• Review source code, logs, dependencies, and technical security findings.
• Identify false positives and duplicate findings.
• Validate remediation through retesting and provide remediation guidance.
• Automate security workflows and integrate security tools and platforms.
• Track vulnerability remediation and risk disposition.
• Prepare security reports and support governance reviews and stakeholder engagements.

Skills

Application Security Testing

CBOM/SBOM knowledge

Secure SDLC

Source code review

Scripting/Automation (Python/PowerShel

Security reporting & vulnerability mg

Stakeholder management

Job description

Epergne Solutions in Singapore is seeking an experienced Application Security Engineer to support application security testing, Malcode and CBOM capabilities, vulnerability assessment, remediation, and security process automation.

You will work on developing and enhancing security capabilities, performing assessments, reviewing code and logs, and automating security workflows to ensure robust security across applications.