Senior Application Security Engineer — SBOM & Automation

Exasoft Pte. Ltd.; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Exasoft Pte. Ltd. is seeking a security-focused professional to drive application security testing and software supply-chain initiatives in Singapore. The role emphasizes SAST/DAST/SCA, SBOM/CBOM awareness, and remediation validation across development teams.

You will work on integrating security tooling, automating workflows, analyzing findings, and producing reports for governance and stakeholders. Strong scripting skills and experience with vulnerability lifecycle management are required.

Qualifications

• Experience in Application Security Testing including SAST, DAST and SCA.
• Hands-on knowledge of Software Composition Analysis (SCA) and dependency risk management.
• Strong understanding of Secure SDLC practices and application security principles.
• Experience in source code review, vulnerability assessment, and remediation validation.
• Proficiency in Python, PowerShell, or similar scripting languages for security automation.
• Experience with security reporting, analytics, and vulnerability management.
• Knowledge of SBOM/CBOM, malware analysis, and software supply-chain security.
• Strong understanding of vulnerability lifecycle management, risk assessment, and security governance.

Responsibilities

• Develop and enhance Malcode and CBOM capabilities.
• Implement workflow automation and process improvements.
• Integrate security tools, repositories, and supporting platforms.
• Enhance security analysis and reporting capabilities.
• Analyze findings for exploitability, severity, and business impact.
• Review source code, logs, and technical artifacts.
• Identify false positives and duplicate findings.
• Validate remediation activities and conduct retesting.
• Provide remediation guidance to application teams.
• Manage vulnerability and finding lifecycle processes.
• Track remediation progress and risk disposition.
• Produce operational and management reports.
• Support governance reviews and stakeholder engagements.

Skills

SAST

DAST

SCA

Secure SDLC

Vulnerability management

Tools

Python

PowerShell

SBOM/CBOM

Job description

Exasoft Pte. Ltd. is seeking a security-focused professional to drive application security testing and software supply-chain initiatives in Singapore. The role emphasizes SAST/DAST/SCA, SBOM/CBOM awareness, and remediation validation across development teams.

You will work on integrating security tooling, automating workflows, analyzing findings, and producing reports for governance and stakeholders. Strong scripting skills and experience with vulnerability lifecycle management are required.