Snr Assoc, Application Security Engineer, Information Security Services, Group Technology

DBS Bank; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

DBS Bank is seeking an experienced Application Security Engineer to fortify our security team and embed secure development practices across the SDLC. You will drive automation, code analysis, and threat mitigation in a complex financial software environment.

You will collaborate with developers, DevOps, and security colleagues to implement secure design principles, run SAST/DAST/IAST, and advance our automation initiatives using Python and Go, including exploration of Generative AI for security

Qualifications

• Degree in computer science, information technology, or a related field.
• Minimum 5 years of experience in cybersecurity engineering, information security, or software development with a secure SDLC focus.
• Deep knowledge of common application security vulnerabilities (OWASP Top 10) and mitigation strategies.
• Strong experience with secure coding practices across languages and frameworks.
• Experience using application security testing tools (SAST/DAST/IAST) and manual testing techniques.

Responsibilities

• Advise on application security tools and processes (SAST/DAST/IAST/SCA) and secure coding guidelines.
• Integrate security into the SDLC, promoting secure design and testing.
• Perform vulnerability analysis and root cause investigations for findings.
• Develop automation scripts in Python/Go to streamline security processes.
• Pilot Generative AI tools to enhance security testing and code analysis.
• Contribute to secure SDLC framework, standards, and policies.
• Educate developers on secure coding and security best practices.
• Stay current with security trends and industry developments.

Skills

Python

Go

Java/JavaScript

OWASP Top 10

DevSecOps

Generative AI in security

Education

Bachelor's or Master's degree in Computer Science/IT or related field

Tools

SAST

DAST

IAST

SCA

CI/CD tooling

Job description

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Technology, we manage the majority of the Bank's processes and inspire to delight our business partners through our multiple banking delivery channels.

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Technology, we manage the majority of the Bank's processes and inspire to delight our business partners through our multiple banking delivery channels.

Team Overview

At DBS Bank, we believe that being the Best Bank for a Better World means also being the Safest Bank in the Digital Age. Our cybersecurity vision is built on proactive defense, strong observability, and continuous resilience — empowered by a diverse team of skilled defenders and innovators. As part of the Group Technology organization, you will be working at the heart of DBS’s digital transformation, safeguarding millions of customers and complex financial ecosystems. The Application Security Team plays a critical role in integrating security practices throughout the software development lifecycle (SDLC), ensuring that applications are designed, developed, and deployed with robust security controls. We emphasize continuous learning, technical depth, and collaboration to stay ahead of evolving application-centric cyber threats.

Role Overview

We are looking for an experienced and proactive Application Security Engineer to strengthen our Application Security Team in defending against advanced and emerging threats targeting our software applications. This role combines analytical depth, technical expertise in secure development, and creative problem-solving to identify, assess, and mitigate security vulnerabilities across the application landscape. A key focus will be on embedding security early in the SDLC, driving automation of security processes, and leveraging technologies like Python and Generative AI to enhance our application security posture. Candidates with experience in financial institutions and familiarity with regulatory landscapes are strongly preferred.

Key Responsibilities

• Provide advisory on application security tools and processes, including but not limited to SAST, DAST, IAST, SCA and secure coding guidelines.
• Drive the integration of security activities into the Software Development Life Cycle (SDLC), promoting secure design principles, secure coding practices, and security testing methodologies.
• Participate and execute vulnerability analysis and root cause investigations for identified security findings.
• Develop and implement automation scripts and tools using Python/Go to streamline application security processes, such as vulnerability scanning orchestration, security control validation, and security metric reporting.
• Explore and pilot the use of Generative AI tools and techniques to enhance security testing, code analysis, threat modeling, and vulnerability remediation efforts.
• Contribute to the continuous improvement of the secure SDLC framework, security standards, and application security policies.
• Contribute to the training and education of developers on secure coding practices and application security best practices.
• Stay up-to-date with the latest security trends, technologies, and industry developments to recommend and implement innovative solutions.

Required Skills And Experience

• Bachelor's or master's degree in computer science, Information Technology, or a related field.
• Minimum 5 years of experience in a cybersecurity engineering, information security, or software development role, with a strong focus on secure software development practices, preferably in the financial services industry.
• Deep technical understanding of common application security vulnerabilities (e.g., OWASP Top 10), attack vectors, and mitigation strategies.
• Strong experience with secure coding principles and security best practices for various programming languages and frameworks.
• Proficiency in utilizing and interpreting results from application security testing tools (SAST, DAST, IAST) and manual penetration testing techniques.
• Experience applying DevSecOps principles including CI/CD, configuration, and infrastructure (Unix/Linux) as code, and auto-remediation.
• Practical development experience with Python and one or more languages such as Java and/or JavaScript/TypeScript.
• Familiarity with Generative AI concepts and their potential applications in cybersecurity, especially in areas like code analysis, vulnerability detection, and threat intelligence.
• Comprehensive understanding of secure software development lifecycle methodologies and frameworks.

What We’re Looking For

• Highly analytical and technically curious problem-solver who is passionate about securing applications throughout their lifecycle.
• Strong collaborator across development, DevOps, and other security teams, with excellent written and verbal communication skills.
• Experienced in designing, implementing, and operationalizing secure development practices and security automation.
• Proactive self-starter passionate about driving secure design, secure coding, and continuous security improvement within the SDLC.
• Self-driven, investigative mindset with the ability to work independently under minimal oversight and lead security initiatives.

Location:

DBS Asia Hub

Job:

Technology

Schedule:

Regular

Employee Status:

Full time