Lead, Application Security - Secure SDLC & DevSecOps

A prominent recruitment firm in Singapore is looking for an experienced cybersecurity professional to drive secure software development life cycle practices. The ideal candidate will have over 8 years of application security experience, strong hands-on skills with security testing tools, and familiarity with DevSecOps principles. Responsibilities include conducting security assessments, integrating security into CI/CD pipelines, and providing guidance on risk mitigation strategies. This role requires a deep understanding of secure software development life cycle practices, including threat modeling, secure coding practices, and vulnerability management. The successful candidate will be responsible for developing and implementing a comprehensive application security program that aligns with industry best practices and regulatory requirements. Key responsibilities include: • Conducting security assessments to identify vulnerabilities and provide recommendations for remediation; • Integrating security into CI/CD pipelines to ensure secure software development life cycle practices are followed; • Providing guidance on risk mitigation strategies to stakeholders; • Developing and implementing a comprehensive application security program that aligns with industry best practices and regulatory requirements; • Collaborating with cross-functional teams to identify and prioritize security initiatives; • Staying up-to-date with the latest threat intelligence, vulnerabilities, and emerging trends in application security. The ideal candidate will have: • Over 8 years of experience in application security; • Strong hands-on skills with security testing tools such as Burp Suite, ZAP, or OWASP; • Familiarity with DevSecOps principles and practices; • Experience with secure software development life cycle practices, including threat modeling, secure coding practices, and vulnerability management; • Strong analytical and problem-solving skills; • Excellent communication and interpersonal skills. This is a full-time position based in Singapore.