Application Security Engineer

About the Position

Application Security Engineer

Sopra Steria is a leading European technology company specializing in Consulting, Digital Services, and Software. With a global presence and over 51,000 employees, we support organizations in their digital transformation journey. Our Asia Pacific regional headquarters in Singapore focuses on Infrastructure, Cloud, and Cybersecurity services.

We are forming a team of 6 (including 1 team lead) to assist in a significant government project. The project involves Security Risk Assessment, Security Policies Review, Security Design, Application Security, Vulnerability Assessment, System Security Acceptance Testing, and Cloud Security.

As an Application Security Engineer, you will provide expert advice, conduct security assessments, and help government teams integrate security into every stage of their software development lifecycle.

Responsibilities

• Perform comprehensive risk assessments of development environments, DevOps workflows, and CI/CD processes.
• Conduct security assessments, threat modeling, and code reviews to identify vulnerabilities in applications.
• Review and recommend improvements in areas such as identity and access management, network security, secure SDLC practices, source code management, cryptographic key handling, and data protection.
• Guide application teams on adopting secure development practices and integrating security tools such as SAST, DAST, and VAPT into their workflows.
• Review existing CI/CD pipelines from a security perspective and provide expert recommendations to align with DevSecOps principles.
• Mentor and advise internal teams on secure coding practices across various platforms and languages (e.g., JavaScript, Node.js, Java, C#, Python, etc.).
• Develop and maintain secure coding guidelines and security standards.
• Collaborate with development teams to remediate security issues and provide guidance on secure coding practices.

Requirements

• At least 3 years of experience in application security or software development with a security focus.
• Strong experience in DevSecOps with a solid foundation in cybersecurity and risk assessment.
• Hands-on knowledge of secure software development lifecycle (SSDLC) principles and tools.
• Familiarity with integrating security testing tools and practices within CI/CD environments.
• Experience with secure coding and vulnerability assessments across common web and mobile technologies.
• Ability to work with and guide development teams without being directly involved in implementation.
• Excellent communication skills and the ability to translate complex security requirements into practical advice.

We Offer

• Work-life balance: Hybrid working mode, 18 days of Annual leave
• Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
• Performance incentives: Annual bonus based on individual performance
• Learning & development: Training programs, certification opportunities, and training incentives to support career growth
• Team culture: Regular team-building activities and social events

About the Company

Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America, and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.

In Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria’s Infrastructure, Cloud, and Cybersecurity services.

Job Location

Singapore