Application Security Engineer

iFAST is a fintech wealth management platform headquartered in Singapore, providing a comprehensive range of investment products and services to financial advisory firms, financial institutions, banks, internet companies, multinational companies, as well as retail and high net worth investors in Asia.

Job Summary

We are looking for an application security professional to find vulnerabilities and business logic weaknesses in our business applications. You will work with developers and DevSecOps to get them fixed.

Responsibilities:

• Perform security assessments of web, mobile and API applications using threat modelling, code scanning and penetration testing.

• Plan and run red team exercises against applications and supporting infrastructure within agreed rules of engagement.

• Provide security consulting to development teams on secure design, architecture reviews and threat modelling.

• Work with developers to remediate findings, remove false positives from scan reports and retest fixes.

• Work with DevOps to build tools and automation that improve security in the CI/CD pipeline.

• Develop secure coding standards and train development teams on web and mobile secure coding.

Requirements:

• Bachelor’s degree in computer science, cybersecurity or a related field, or equivalent experience.

• 2 to 4 years of experience in penetration testing, application security or red teaming.

• Hands-on with Burp Suite, Metasploit, Nmap and similar tools; strong knowledge of OWASP Top 10 and API security.

• Good understanding of Linux, Windows, Active Directory, TCP/IP, cloud and container infrastructure.

• Proficient in at least one scripting or programming language (e.g. Python, Java).

• Relevant certifications (OSCP, OSEP or similar) are a plus.

• Ability to think outside the box and find creative ways to bypass security controls and defenses.

• Excellent written and verbal communication skills.

• Strong analytical and problem-solving skills.

Why Join Us?

• Work on modern AppSec practices instead of traditional “checklist security”

• Gain hands-on exposure to AI-assisted security tooling and threat intelligence

• Collaborate directly with engineering teams on real-world systems

• Build highly transferable skills across security, cloud, DevOps, and AI-era engineering

• Grow your career in one of the fastest-evolving domains in tech
  

Perks and Benefits:

• Employee Share Options / Performance Shares : The company introduced the Share Options / Performance Shares Plan to recognize employees' contributions and achievements in the growth of the company.

• Investment : 0% sales charge for unit trust & 50% staff rebate on front end charges for stocks and ETFs * if you invest through our platform.

• Snacks & Beverages : Enjoy a variety of snacks and drinks from vending machines, including fresh-brewed espresso, Americano, and more from the coffee machine. Additionally, we have a weekly Breakfast Day and Fruits Day!

• Relaxation : Access to a relaxation room equipped with massage chairs at all times to help you relieve tiredness and stress.

• Yearly Activities : Participation in outdoor activities, celebrations during festive seasons, and more exciting events!

• Remuneration Package : Competitive salary packages that are well above market rates for those with the right potential.

• Annual Salary Review and Yearly Bonus : Both processes will be conducted depending on the company's performance and individual work performance.

• Coverage : Comprehensive insurance along with Medical, Dental & Optical coverage.

• Allowances : Monthly sports allowance, Enjoy yearly department gatherings, and welcome lunches for new staffs.

• Training : Benefit from free external and internal training providers, ensuring continuous learning and development.

• Annual Leave : Entitlement to 21 days of annual leave.

These benefits are designed to enhance your overall well-being and ensure a rewarding working experience with us.