Application Security Engineer - GEC - Singapore
Core
Conduct vulnerability discovery, risk management, and security assurance for Global e-Commerce applications and products.
Role type
Application Security Engineer
Builds
SDL/DevSecOps security systems, policies, controls, and processes
Domain
E-commerce, Application Security
Required skills
vulnerability discovery, risk management, white-box auditing, code review (Python, Go, Node.js, Java), SDL/DevSecOps practices, automation, security assessments, penetration testing, incident response, architectural risk analysis
Preferred skills
building/optimizing SDL/DevSecOps programs at scale, data security, privacy compliance, architecture security, red/blue exercises, cross-regional security operations
Technologies
Python, Go, Node.js, Java
Responsibilities
Conduct vulnerability discovery and risk management; Provide security assurance and support for key projects; Build and optimize SDL/DevSecOps security systems, policies, controls, and processes; Mitigate security risks during design and development; Perform security assessments, code auditing, penetration testing, vulnerability discovery, and attack-and-defense exercises; Respond to security incidents, provide technical analysis, and coordinate remediation; Collaborate with product development, engineering, operations, and other teams to improve security
