The Company
Our client is seeking a Senior Security Engineer (APAC) to strengthen application and engineering security across the region. This is a hands-on role focused on Secure SDLC, Application Security, DevSecOps, secure deployments, and advisory support aligned to ISO and NIST frameworks.
The Role
- Drive and enhance Secure Software Development Lifecycle (SSDLC) practices across engineering teams
- Embed security controls and best practices into all stages of the application development lifecycle
- Conduct application security assessments, threat modelling, secure design reviews, and vulnerability assessments
- Identify, assess, and support remediation of application security risks and vulnerabilities
- Integrate security tooling and controls into CI/CD pipelines to support secure software delivery
- Drive automation of security testing including code scanning, dependency checks, secrets detection, and container security
- Work closely with DevOps, cloud, and engineering teams to ensure secure deployments across environments
- Act as a trusted security advisor to technology and business stakeholders across APAC
- Support governance initiatives and align security controls with ISO and NIST frameworks
- Partner with risk, compliance, infrastructure, and engineering teams on remediation and audit-related activities
Your Profile
- At least 7 years of experience in information security, application security, DevSecOps, or a related cybersecurity role
- Strong hands-on experience in Secure SDLC and Application Security
- Proven experience integrating security into DevSecOps and secure software deployment processes
- Solid understanding of secure coding principles, common application vulnerabilities, and remediation approaches
- Experience with SAST, DAST, SCA, container scanning, or similar security technologies
- Familiarity with cloud and modern application environments
- Good understanding of ISO and NIST security standards and frameworks
- Strong communication and stakeholder management skills, with the ability to work effectively across regional teams
- Relevant certifications such as OSCP, GWAPT, CSSLP, CISSP, or cloud security certifications will be an advantage
- Experience in regulated environments and exposure to enterprise-scale application environments will be preferred
Apply Today
Please send your resume, in WORD format only and quote reference number Ref No DC13460646, by clicking the apply button. Please note that only short-listed candidates will be contacted.
Robert Half International Pte Ltd. Co. Registration no.: 200612189E | EA Licence no.: 07C5595 | Dmitriy Chervinskyi EA Registration no.: R22108655
By clicking ‘apply’, you give your express consent that Robert Half may use your personal information to process your job application and to contact you from time to time for future employment opportunities. For further information on how Robert Half processes your personal information and how to access and correct your information, please read the Robert Half privacy notice: https://www.roberthalf.com.sg/privacy-statement. Please do not submit any sensitive personal data to us in your resume (such as government ID numbers, ethnicity, gender, religion, marital status or trade union membership) as we do not collect your sensitive personal data at this time.
