Sopra Steria

Application Security Engineer

Singapore · On-site · Full-time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerSopra Steria
LocationSingapore
Work styleOn-site
Employment typeFull-time
Employer posted21 days ago

Description:

For this project, we are forming a team of 6 (including 1 team lead) to assist in a huge government project to perform the following scope of works:

Security Risk Assessment
Security Policies, Standards, Guidelines, And Procedures Review
Security Design
Application Security
Vulnerability assessment and
System Security Acceptance Testing
Cloud Security

The selected candidate will be working collaboratively within the team to fulfil the project requirements. As such, there is no expectation for one individual to possess all skill sets in the 6 domains.

As an expert in Application Security, your role will focus on providing expert advice, conducting security assessments, and helping government teams build security into every stage of their software development lifecycle.

Responsibilities:

Show full description

Perform comprehensive risk assessments of development environments, DevOps workflows, and CI/CD processes.
Perform security assessments, threat modelling, and code reviews to identify vulnerabilities in applications.
Review and recommend improvements in areas such as identity and access management, network security, secure SDLC practices, source code management, cryptographic key handling, and data protection.
Guide application teams on adopting secure development practices and integrating security tools such as SAST, DAST, and VAPT into their workflows.
Review existing CI/CD pipelines from a security perspective and provide expert recommendations to align with DevSecOps principles.
Mentor and advise internal teams on secure coding practices across various platforms and languages (e.g., JavaScript, Node.js, Java, C#, Python, etc.).
Develop and maintain secure coding guidelines and security standards.
Collaborate with development teams to remediate security issues and provide guidance on secure coding practices.

At least 3 years of experience in application security or software development with security focus.
Strong experience in DevSecOps with a solid foundation in cybersecurity and risk assessment.
Hands-on knowledge of secure software development lifecycle (SSDLC) principles and tools.
Familiarity with integrating security testing tools and practices within CI/CD environments.
Experience with secure coding and vulnerability assessments across common web and mobile technologies.
Ability to work with and guide development teams without being directly involved in implementation.
Excellent communication skills and the ability to translate complex security requirements into practical advice

•Work-life balance: Hybrid working mode, 18 days of Annual leave
•Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
•Performance incentives: Annual bonus based on individual performance
•Learning & development: Training programs, certification opportunities, and training incentives to support career growth
•Team culture: Regular team-building activities and social events

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.