Senior Application Security Engineer — AI-Driven Secure SDLC

DBS Bank Australia; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

DBS Asia Hub is seeking an experienced Application Security Engineer to strengthen the security of our software ecosystem. The role focuses on embedding security early in the SDLC, driving automation, and using Python and Generative AI to bolster testing and remediation.

Candidates should have 5+ years in cybersecurity or secure development within financial services, with strong knowledge of OWASP Top 10 and secure coding practices across languages.

Qualifications

• Bachelor's or master's degree in computer science, information technology, or related field.
• Minimum 5 years in cybersecurity, information security, or software development with secure SDLC focus.
• Deep understanding of common app vulnerabilities (OWASP Top 10) and mitigations.
• Experience with secure coding principles across languages/frameworks and tools (SAST/DAST/IAST).
• Familiarity with DevSecOps, CI/CD and Unix/Linux as code; Python development is a plus.

Responsibilities

• Provide advisory on application security tools and processes (SAST/DAST/IAST/SCA).
• Integrate security activities into the SDLC and promote secure design and testing.
• Perform vulnerability analysis and root-cause investigations.
• Develop automation scripts using Python/Go to streamline security processes.
• Explore Generative AI for code analysis, threat modeling, and remediation efforts.
• Contribute to secure SDLC framework and security education for developers.

Skills

Secure coding

DevSecOps

Python

CI/CD

Threat modeling

OWASP Top 10

Education

Bachelor's degree in CS/IT

Master's degree (advantage)

Tools

SAST tools

DAST tools

IAST tools

Security automation

Job description

DBS Asia Hub is seeking an experienced Application Security Engineer to strengthen the security of our software ecosystem. The role focuses on embedding security early in the SDLC, driving automation, and using Python and Generative AI to bolster testing and remediation.

Candidates should have 5+ years in cybersecurity or secure development within financial services, with strong knowledge of OWASP Top 10 and secure coding practices across languages.