Snr Assoc, Application Security Engineer, Information Security Services, Group Technology

DBS Bank Australia; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

DBS Asia Hub is seeking an experienced Application Security Engineer to strengthen the security of our software ecosystem. The role focuses on embedding security early in the SDLC, driving automation, and using Python and Generative AI to bolster testing and remediation.

Candidates should have 5+ years in cybersecurity or secure development within financial services, with strong knowledge of OWASP Top 10 and secure coding practices across languages.

Qualifications

• Bachelor's or master's degree in computer science, information technology, or related field.
• Minimum 5 years in cybersecurity, information security, or software development with secure SDLC focus.
• Deep understanding of common app vulnerabilities (OWASP Top 10) and mitigations.
• Experience with secure coding principles across languages/frameworks and tools (SAST/DAST/IAST).
• Familiarity with DevSecOps, CI/CD and Unix/Linux as code; Python development is a plus.

Responsibilities

• Provide advisory on application security tools and processes (SAST/DAST/IAST/SCA).
• Integrate security activities into the SDLC and promote secure design and testing.
• Perform vulnerability analysis and root-cause investigations.
• Develop automation scripts using Python/Go to streamline security processes.
• Explore Generative AI for code analysis, threat modeling, and remediation efforts.
• Contribute to secure SDLC framework and security education for developers.

Skills

Secure coding

DevSecOps

Python

CI/CD

Threat modeling

OWASP Top 10

Education

Bachelor's degree in CS/IT

Master's degree (advantage)

Tools

SAST tools

DAST tools

IAST tools

Security automation

Job description

## Snr Assoc, Application Security Engineer, Information Security Services, Group TechnologyApplylocations: Singapore - Easttime type: Full timeposted on: Posted Todayjob requisition id: WD86413**Business Function** Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Technology, we manage the majority of the Bank's processes and inspire to delight our business partners through our multiple banking delivery channels. **Team Overview** At DBS Bank, we believe that being the Best Bank for a Better World means also being the Safest Bank in the Digital Age. Our cybersecurity vision is built on proactive defense, strong observability, and continuous resilience — empowered by a diverse team of skilled defenders and innovators. As part of the Group Technology organization, you will be working at the heart of DBS’s digital transformation, safeguarding millions of customers and complex financial ecosystems. The Application Security Team plays a critical role in integrating security practices throughout the software development lifecycle (SDLC), ensuring that applications are designed, developed, and deployed with robust security controls. We emphasize continuous learning, technical depth, and collaboration to stay ahead of evolving application-centric cyber threats. **Role Overview** We are looking for an experienced and proactive Application Security Engineer to strengthen our Application Security Team in defending against advanced and emerging threats targeting our software applications. This role combines analytical depth, technical expertise in secure development, and creative problem-solving to identify, assess, and mitigate security vulnerabilities across the application landscape. A key focus will be on embedding security early in the SDLC, driving automation of security processes, and leveraging technologies like Python and Generative AI to enhance our application security posture. Candidates with experience in financial institutions and familiarity with regulatory landscapes are strongly preferred. **Key Responsibilities*** Provide advisory on application security tools and processes, including but not limited to SAST, DAST, IAST, SCA and secure coding guidelines.* Drive the integration of security activities into the Software Development Life Cycle (SDLC), promoting secure design principles, secure coding practices, and security testing methodologies.* Participate and execute vulnerability analysis and root cause investigations for identified security findings.* Develop and implement automation scripts and tools using Python/Go to streamline application security processes, such as vulnerability scanning orchestration, security control validation, and security metric reporting.* Explore and pilot the use of Generative AI tools and techniques to enhance security testing, code analysis, threat modeling, and vulnerability remediation efforts.* Contribute to the continuous improvement of the secure SDLC framework, security standards, and application security policies.* Contribute to the training and education of developers on secure coding practices and application security best practices.* Stay up-to-date with the latest security trends, technologies, and industry developments to recommend and implement innovative solutions.**Required Skills and Experience*** Bachelor's or master's degree in computer science, Information Technology, or a related field.* Minimum 5 years of experience in a cybersecurity engineering, information security, or software development role, with a strong focus on secure software development practices, preferably in the financial services industry.* Deep technical understanding of common application security vulnerabilities (e.g., OWASP Top 10), attack vectors, and mitigation strategies.* Strong experience with secure coding principles and security best practices for various programming languages and frameworks.* Proficiency in utilizing and interpreting results from application security testing tools (SAST, DAST, IAST) and manual penetration testing techniques.* Experience applying DevSecOps principles including CI/CD, configuration, and infrastructure (Unix/Linux) as code, and auto-remediation.* Practical development experience with Python and one or more languages such as Java and/or JavaScript/TypeScript.* Familiarity with Generative AI concepts and their potential applications in cybersecurity, especially in areas like code analysis, vulnerability detection, and threat intelligence.* Comprehensive understanding of secure software development lifecycle methodologies and frameworks.**What We’re Looking For*** Highly analytical and technically curious problem-solver who is passionate about securing applications throughout their lifecycle.* Strong collaborator across development, DevOps, and other security teams, with excellent written and verbal communication skills.* Experienced in designing, implementing, and operationalizing secure development practices and security automation.* Proactive self-starter passionate about driving secure design, secure coding, and continuous security improvement within the SDLC.* Self-driven, investigative mindset with the ability to work independently under minimal oversight and lead security initiatives.**Location:**DBS Asia Hub**Job:**Technology**Schedule:**Regular**Employee Status:**Full time