Senior Application Security Analyst #IFL

Overview:

This role is a critical bridge between the Cybersecurity and Software Engineering teams.

Job Responsibilities:

• Policy & Procedures: Engage with relevant stakeholders to establish and review corporate policies and procedures governing the secure development of applications.
• Security Architecture & Design: Participate in "Shift Left" initiatives by performing threat modeling and architectural risk assessments during the design phase.
• Vulnerability Management: Conduct regular security scans, including SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing) and SCA (Software Composition Analysis). Prioritize and triage scan results for development teams.
• Code Review: Perform manual secure code reviews to identify logic flaws and vulnerabilities, including those outlined in the OWASP Top 10, that automated tools may miss.
• DevSecOps Integration: Assist in automating security checkpoints within CI/CD pipelines, such as: Jenkins, GitLab CI, GitHub Actions
• Remediation Guidance: Act as a security consultant to developers by providing clear, actionable remediation advice and code examples to address identified security gaps.
• Training & Advocacy: Lead Security Champion programs.Conduct secure coding workshops to foster a security-first culture across development teams.

Technical Skills:

• Proficiency in at least one major language (e.g., Java, Python, JavaScript, or C#).
• Deep understanding of web application vulnerabilities (SQLi, XSS, CSRF, SSRF).
• Experience with security tools like Burp Suite, Checkmarx, Snyk, or Veracode.
• Familiarity with container security (Docker/Kubernetes) and Cloud environments (AWS/Azure/GCP).
• Certifications (Preferred): CSSLP, GWEB, CASE, or OSCP.

Interested applicants, please Email, fabianling@recruitexpress.com.sg

Fabian Ling Tuong Liing

R25129353

Recruit Express Pte Ltd

EA Licence No: 99C4599

We regret that only shortlisted candidates will be contacted.