Senior Security Engineer (SDLC) - Information Security Team

SHOPEE IP SINGAPORE PRIVATE LIMITED; Singapore; On-site; SGD 78,000 - 123,000; Full time

Job summary

SHOPEE IP SINGAPORE PRIVATE LIMITED is seeking a security engineer to design and enhance internal tools that enable secure software delivery. You will work on AI-assisted code review, SAST, SCA, and security automation integrated into CI/CD workflows.

The role requires practical experience with security tooling, web/API security, and programming in Go, Python, Java, or JavaScript. You will mentor juniors and contribute to ongoing DevSecOps improvements.

Qualifications

• Bachelor’s degree in a related engineering field.
• 2+ years of full-time experience in security engineering or application security.
• Experience with AI-assisted development, code-analysis, or security tools.
• Strong understanding of Web, API, and code-security risks.
• Ability to read code and identify root causes of vulnerabilities.
• Familiarity with at least one language (Go, Python, Java, or JavaScript).
• Solid CS fundamentals including networking, operating systems, databases.

Responsibilities

• Design and improve internal security tools and platforms (AI-assisted review, SAST, SCA, and supply-chain security).
• Develop detection rules and automated workflows based on security requirements.
• Perform secure code review and vulnerability analysis to improve coverage.
• Apply AI-assisted development and security research tools to increase efficiency.
• Contribute to agent-based security tooling and orchestrate tasks.
• Integrate security tools with Git, SCM, and CI/CD pipelines.
• Contribute to feature development, testing, and ongoing maintenance.
• Collaborate with security and engineering teams to address issues.
• Keep up with SecOps and AI-assisted security trends.
• Mentor junior engineers and interns.

Skills

Security engineering

AI-assisted development

Code analysis

Vulnerability analysis

Secure SDLC

CI/CD pipelines

Go

Python

Java

JavaScript

Education

Bachelor’s degree in Computer Science / Information Systems / Software Engineering

Tools

SAST

SCA

CI/CD tools

Security automation tools

Job description

About the Team

Our security engineering team builds internal platforms that help developers deliver secure software efficiently. We develop Secure SDLC capabilities including SAST, SCA, software supply-chain security, and DevSecOps automation. We also apply AI and Agent technologies to code review, vulnerability analysis, false-positive reduction, and security automation, embedding security directly into CI/CD pipelines and developer workflows.

Job Description

• Participate in the design, development, and continuous improvement of internal security tools and platforms, including but not limited to: AI-assisted code review and vulnerability analysis; Static Application Security Testing (SAST); Software Composition Analysis (SCA) and software supply-chain security; Security automation and other Secure SDLC tools.
• Develop and improve security detection rules, analysis logic, and automated workflows based on security requirements.
• Participate in secure code review, vulnerability analysis, and false-positive investigation to improve detection accuracy and vulnerability coverage.
• Use AI-assisted development, code-analysis, and security-research tools to improve engineering and security-analysis efficiency.
• Contribute to LLM- or Agent-based security tools involving repository search, tool use, task orchestration, and result validation.
• Integrate security tools with Git, source-code management platforms, CI/CD pipelines, and other developer workflows.
• Participate in feature development, testing, troubleshooting, performance improvement, and ongoing system maintenance.
• Collaborate with security and engineering teams to support the analysis, remediation, and continuous improvement of security issues.
• Keep up with developments in application security, DevSecOps, software supply-chain security, and AI-assisted security engineering.
• Mentoring Junior Security Engineers and Intern.

Requirements

• Bachelor’s degree in Computer Science, Information System, Software Engineering, Automation Engineering, or related field in Engineering.
• At least 2 years of full time experience in security engineering or application security.
• Practical experience using AI-assisted development, code-analysis, or security tools, with the ability to perform basic validation of AI-generated code and analysis results is preferred.
• Good application security fundamentals and an understanding of common Web, API, and code-security risks, such as injection, access-control vulnerabilities, authentication and authorization weaknesses, SSRF, unsafe file handling, and sensitive-data exposure.
• Basic code-reading and analysis skills, with the ability to understand the root causes and remediation approaches of common vulnerabilities.
• Familiarity with at least one programming language, such as Go, Python, Java, or JavaScript, and the ability to implement common features, modify existing code, debug issues, and troubleshoot problems.
• Good computer science fundamentals, including networking, operating systems, databases, processes, threads, and common software runtime mechanisms.