SeniorSecurity Engineer (Application Security) - Singapore

We're building out our security engineering function and looking for someone to own hands-on application security work across our product stack — secure SDLC, CI/CD security tooling, and growing into securing our AI product surfaces over time. Early-stage function: you'll have real scope to shape how we do this, not just execute an existing playbook.

Responsibilities

Own secure SDLC — SAST/DAST integration in CI/CD (Semgrep, CodeQL), vulnerability triage and remediation workflows; Grow into securing our AI product stack over time

Requirements

3+ years hands-on security engineering — building and shipping controls, not just assessing them; Experience in Application Security, backed by tools and delivery you can speak to concretely; Comfortable owning scope and making tool/architecture decisions with reasonable autonomy; Able to communicate risk clearly to engineering and leadership

Nice to have

Strong consulting/pentest backgrounds with a demonstrated build portfolio (personal projects, tooling, automation); Familiarity with relevant frameworks (NIST CSF, CIS, OWASP, MITRE ATT&CK, SOC 2); Cloud & Infrastructure Security; Security Operations; Data Security; Hardware & Firmware Security; Enterprise IT Security; Exposure to AI/LLM security (OWASP LLM Top 10, prompt injection); LLM/AI security

Benefits

Employee Stock Ownership Plan (ESOP); High-Impact Environment; Cutting-Edge AI Tools for Productivity (Cursor, GPT models, Gemini, Claude); Best-in-Class Equipment (top-spec laptops, high-performance workstations, Plaud devices); Annual company offsites and team events; Medical insurance and WICA coverage for all full-time employees; Market-competitive compensation; Global exposure; Vibrant, creativity-fueled work atmosphere