Senior Application Security Consultant

Aryan-Solutions-Pte.-Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Aryan-Solutions-Pte.-Ltd. seeks an experienced Application Security Consultant to strengthen security across enterprise applications and supporting infrastructure. You will review SAST/DAST results, validate vulnerability findings, and work with DevSecOps teams to remediate issues.

The role requires hands-on knowledge of application security testing, secure coding practices, and modern cloud/container environments. Strong communication with development teams is essential.

Qualifications

• Bachelor's degree in a related field.
• Minimum 4 years of experience in Application Security, DevSecOps, or secure software development.
• Strong understanding of application security principles and OWASP Top 10.
• Hands-on with SAST and DAST tools; able to review vulnerability reports.
• Ability to communicate remediation requirements to technical teams.

Responsibilities

• Review SAST/DAST findings from tools.
• Review vulnerability scans across OS, containers, databases, and infra.
• Analyse findings for vulnerabilities, misconfigurations, and risks.
• Assess security hardening across web servers, APIs, OS, containers, and databases.
• Ensure remediation and closure of findings; maintain audit docs.
• Provide guidance on secure coding and SDLC security controls.
• Stay updated on threats and secure development practices.

Skills

Application security

Vulnerability assessment

Secure coding

DevSecOps

CI/CD security

Container security

Cloud security

Communication with developers

Agile/DevOps

Education

Bachelor's degree in computer science, cybersecurity, information technology, or related discipline

Tools

SonarQube

Fortify

Burp Suite

OWASP ZAP

Docker

Kubernetes

Job description

Aryan-Solutions-Pte.-Ltd. seeks an experienced Application Security Consultant to strengthen security across enterprise applications and supporting infrastructure. You will review SAST/DAST results, validate vulnerability findings, and work with DevSecOps teams to remediate issues.

The role requires hands-on knowledge of application security testing, secure coding practices, and modern cloud/container environments. Strong communication with development teams is essential.