Application Security Engineer

Role Overview ncs3 is hiring a Security Engineer in Singapore. This role focuses on protecting digital assets and maintaining the integrity of company systems. The Security Engineer works with teams across the organization to build and maintain security measures. Main Responsibilities Design and implement security controls for systems and infrastructure Conduct risk assessments to identify and address vulnerabilities Respond to security incidents and support investigations Collaborate with other teams to improve security practices Promote security awareness throughout the organization About the Team The Security Engineer will join a group focused on strengthening defenses and building a culture of security awareness at ncs3.

Join our team as a Network and Security Engineer where you will play a pivotal role in safeguarding our network infrastructure. You will be responsible for designing, implementing, and maintaining security measures to protect sensitive data and ensure the integrity of our network systems. Collaborate with cross-functional teams to develop and enforce security policies, conduct risk assessments, and respond to security incidents.

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of the Government Technology Agency (GovTech), is committed to being a trusted partner in enhancing digital security. Over the past decade, ATS has provided a comprehensive array of products and services including infrastructure and operational services, authentication services, governance and assurance services, and managed processes. In an ever-evolving digital and cyber landscape, ATS emphasizes trust and collaboration, working alongside GovTech, government agencies, and commercial partners to effectively mitigate cyber risks and strengthen security measures.As an integral part of the application security core competency within the Development & Innovation for Technology ProducTisation & Operations (DITTO) department, you will play a pivotal role in shaping the application security landscape of our organization.Your responsibilities will encompass providing expert consultancy and support to application teams in areas such as security assessments, DevSecOps practices, and security training and awareness initiatives, aimed at elevating the application security competency and standards within our organization.Key Responsibilities: Design and implement the application security roadmap to enhance security practices across the organization. Establish secure application development practices, standards, and guidelines, fostering a culture of security within application teams. Oversee application security processes and maintain an automated source code scanning platform. Conduct secure code quality reviews and perform application penetration testing and vulnerability assessments. Assist with various application testing and delivery methodologies, including CI/CD. Educate and empower developers on secure coding practices across multiple programming platforms such as Java, C#, PHP, etc., and guide them in writing security acceptance criteria in user stories. Train application teams to develop security unit tests and carry out secure coding assessments. Collaborate with the DevOps team to enhance security within the CI/CD pipeline. Qualifications: A minimum of 3-5 years of combined experience in software development, application security, and cloud computing (e.g., Azure, AWS). Proficient in conducting manual secure source code reviews across at least one of the following programming platforms: Java, PHP, JavaScript, C#, Android, or iOS, utilizing both waterfall and Agile methodologies. Experience in threat modeling, with the ability to create threat profiles for application projects to identify, assess, and mitigate application security risks. Familiarity with mobile and web application programming interfaces (API) architecture, including REST, SOAP, SSL/TLS. Knowledge of industry security best practices such as OWASP Top 10 and OWASP Application Security Verification Standard. Experience with using SAST tools for secure code analysis.

Team: Information SecurityPosition Overview:Join Squarepoint Capital as a Senior Information Security Engineer, where you will leverage your expertise to enhance our security posture. In this critical role, you will provide expert guidance and implement improvements across essential domains including network, cloud, data, and system security. You will serve as the escalation point for Security Operations, effectively analyzing and resolving complex security issues. Key responsibilities include overseeing security for vital IT projects, leading threat modeling for intricate systems, auditing for security vulnerabilities, and developing automated capabilities to continuously assess the effectiveness and resilience of our controls. This role presents a unique opportunity to spearhead security initiatives and influence our security roadmap. A high degree of self-motivation and proactivity is essential for success in this position.Enhance security measures across core areas such as network and system security, email security, cloud security, and data protection.Act as a security advisor for IT projects, ensuring compliance with security requirements and risk mitigation.Manage and optimize security tools, ensuring effective deployment and maintenance.Lead the design and development of security solutions and architectures protecting critical assets.Provide second-line support to Security Operations.Conduct threat modeling and risk assessments to identify vulnerabilities and execute proactive mitigation strategies.Oversee relationships with the Managed Detection and Response (MDR) provider, ensuring service efficiency and continuous enhancement.Implement initiatives from the security roadmap, aligning with business goals and emerging threats.Collaborate with cross-functional teams to elevate security awareness and integrate security into business processes.

Nodeworthy develops an integrated decentralized platform that serves one of the crypto sector’s largest communities. With billions traded daily, the company prioritizes security at every level, delivering resilient infrastructure for users and partners in the evolving blockchain space. Location This is an onsite role based in Singapore or Malaysia. Role overview The Security Engineer will help shape and expand security practices for both cloud infrastructure and applications. This role works closely with infrastructure and product teams to design secure systems, enforce rigorous controls, and address risks proactively. A strong background in defensive security, technical expertise, and hands-on experience with modern cloud environments are important for success in this position. Main responsibilities Design and deploy security controls for cloud and application infrastructure. Maintain and improve security standards in AWS environments. Manage and optimize IAM systems, including roles, policies, and access governance. Collaborate with engineering teams to embed security into system architecture and development processes. Identify vulnerabilities and develop mitigation strategies for infrastructure and applications.

BitMEX seeks a Senior Offensive Security Engineer to join the Product Security team in Singapore. This position centers on maintaining critical security systems that protect the platform’s architecture. Collaboration with engineering and DevOps teams is a core part of the role, providing guidance on security best practices. Role overview This role focuses on safeguarding the platform by ensuring key security controls remain effective and up to date. The Senior Offensive Security Engineer will work closely with technical teams to identify risks and help implement practical solutions. What you will do Maintain and improve security systems that defend the platform’s infrastructure Support engineering and DevOps teams by advising on secure design and implementation Promote security best practices across the organization Location This position is based in Singapore.

Join Crypto Inc. as an AI Security Engineer, where you will play a pivotal role in safeguarding our advanced AI systems and ensuring the integrity of our digital infrastructure. In this dynamic environment, you will collaborate with cross-functional teams to identify vulnerabilities, implement robust security measures, and develop innovative solutions to combat emerging threats.

Join our dynamic tech team at manusai as a Senior Information Security Engineer. In this crucial role, you will spearhead the design, implementation, and enhancement of security measures across our extensive global multi-cloud environment. Your expertise will not only address security incidents but will also shape innovative security strategies for the future.Key ResponsibilitiesThreat Modeling & Incident Response: Establish and uphold global cloud security incident response protocols, craft comprehensive playbooks, and lead routine drills. Efficiently manage intricate security incidents, perform thorough root cause analyses (RCA), and implement safeguarding measures.Security Architecture & Operations: Conceptualize, deploy, and sustain security solutions across multi-cloud platforms (AWS, GCP, Azure), ensuring that architecture is scalable, resilient, and adaptable to future needs.Enterprise Security Leadership: Align security strategies with business objectives, enhancing the overall security maturity of the organization.Compliance & Automation: Ensure adherence to international security standards such as ISO 27001, ISO 27701, and SOC 2. Advocate for security automation and “Security as Code” initiatives to elevate operational efficiency.Vulnerability Management & Penetration Testing: Execute regular vulnerability assessments, risk evaluations, and penetration tests. Monitor emerging threats and coordinate remediation efforts effectively.QualificationsRequired:Bachelor’s degree in Computer Science, Cybersecurity, or a related discipline, coupled with a minimum of 3 years of experience in information security.Extensive knowledge in cloud security, with practical experience in at least two major cloud platforms (AWS, GCP, Azure) and associated security tools (e.g., AWS Security Hub, GCP Security Command Center).Proficient in Linux system security, including hardening, log analysis, intrusion detection, and incident response.Demonstrated ability to manage high-pressure security incidents and conduct effective post-incident reviews.In-depth knowledge of web and application security, with experience in penetration testing and code reviews.Preferred:Relevant certifications such as CISSP, CISM, or similar.Experience with security-related scripting and automation.

Role: Principal Security Engineer - Cloud & InnovationAs a key player in a leading organization, you will spearhead initiatives in cloud security, zero trust architecture, and advanced threat detection across multi-cloud environments. This position is perfect for individuals who are passionate about crafting cutting-edge security solutions at the convergence of cloud technologies, Kubernetes, and AI security.Key ResponsibilitiesLead security innovation efforts by identifying and addressing emerging threats in cloud, container, and AI systems, creating scalable solutions.Conduct research, prototype, and implement advanced security capabilities from initial proof-of-concept to full production deployment.Design and enhance runtime security mechanisms for Kubernetes and cloud-native environments.Simulate multi-cloud attack scenarios to improve detection and response strategies.Develop and implement frameworks for security automation and policy-as-code.Architect and promote security best practices across multi-cloud platforms, focusing on IAM, logging, encryption, and network controls.Oversee Kubernetes security initiatives, including workload protection, admission controls, and supply chain security measures.Investigate and integrate emerging security technologies such as eBPF, confidential computing, and AI security methodologies.Work collaboratively with cross-functional teams to ensure secure system design and implementation.

Join our dynamic team at Accion Labs as an Infrastructure Security Solution Engineer. In this pivotal role, you will be responsible for designing and implementing robust security solutions to safeguard our infrastructure. You will collaborate with cross-functional teams to identify vulnerabilities and enhance security protocols, ensuring the integrity and security of our systems.

About ClickHouseRecognized in the 2025 Forbes Cloud 100 list, ClickHouse stands out as a pioneer in the cloud industry, delivering exceptional real-time analytics, data warehousing, observability, and AI workloads. With a customer base exceeding 3,000 and an astounding annual recurring revenue (ARR) growth of over 250% year-over-year, we are at the forefront of innovation.The recent $400 million Series D funding round underscores our rapid growth and has attracted major clients including Capital One, Lovable, Decagon, Polymarket, and Airwallex, joining the ranks of renowned brands like Meta, Cursor, Sony, and Tesla.Join us on our mission to revolutionize data utilization in businesses and be a part of our exciting journey!The Security Team at ClickHouse is dedicated to enhancing security across applications, cloud environments, and enterprises. We seek a seasoned security engineer who is hands-on and passionate about advancing modern security methodologies and tools, specifically in detection and incident response.

Join our dynamic team at NCS as a Network & Security Engineer! We are on the lookout for skilled professionals to contribute to the maintenance and support of OneCare’s client network. Role OverviewIn this pivotal role, you will oversee the initial support and ongoing maintenance of network and security systems, ensuring that we deliver 24/7 onsite and remote troubleshooting assistance. Your responsibilities will include hardware replacements, implementing security patches, and upgrading firmware or software on various network and security devices, while consistently adhering to SLA contractual obligations. Your ResponsibilitiesNetwork and Security MaintenanceConduct regular network maintenance and system upgrades, including service packs, patches, and hot fixes.Manage hardware replacements by preparing replacement devices with the same firmware/software and patches as the faulty equipment, necessitating basic to intermediate configuration skills. Troubleshooting and SupportQuickly identify and resolve network and security issues.Provide technical support to end-users and escalate complex issues to senior engineers as needed.Document network problems and solutions for future reference.Possess basic to intermediate skills in switches, routers, and F5 devices.Demonstrate basic to intermediate skills in firewalls such as Fortinet, Checkpoint, and Palo Alto. Security ManagementComply with all client security and cyber hygiene policies and respond to security audits and vulnerability assessments. Incident ResponseParticipate in a 24/7 rotational standby to support clients, ensuring SLA compliance.Address network and security incidents effectively.Engage in incident response drills and post-incident evaluations.Adhere to all processes, including timely escalation to senior engineers. Documentation and ReportingMaintain accurate and up-to-date preventive maintenance reports as contractually required.Provide regular updates on incident tickets daily.Collaborate with fellow engineers to ensure comprehensive documentation of network and security procedures/SOP.

Join our innovative team as an Infrastructure Security Engineer, where your expertise will be invaluable in designing, building, and maintaining robust infrastructure security services. You will play a vital role in ensuring the reliability, availability, and security of our infrastructure platform by implementing advanced automation, effective monitoring, and rapid incident response strategies. A strong understanding of IT architecture, cybersecurity practices, and site reliability engineering (SRE) is essential, along with analytical skills to troubleshoot and resolve security incidents efficiently.

Join Airwallex as a Staff Corporate Security EngineerAt Airwallex, we are revolutionizing the financial landscape for global businesses with our innovative payments platform. Our proprietary technology empowers over 200,000 businesses worldwide, including industry leaders like Brex, Rippling, Navan, Qantas, and SHEIN. We provide fully integrated solutions for everything from business accounts and payments to treasury management and embedded finance.Founded in Melbourne, our dynamic team of over 2,000 talented professionals across 26 global offices is dedicated to building the future of finance. Valued at US$8 billion and backed by top-tier investors such as T. Rowe Price, Visa, and Sequoia, Airwallex is at the forefront of creating a seamless global payments experience. If you’re eager to take on ambitious challenges and grow your career, we want you on our team.Who We Are Looking ForWe seek innovative builders with an entrepreneurial spirit who are driven by impact, rapid learning, and ownership. You will bring exceptional technical skills and keen analytical thinking, motivated by our mission and operating principles. You thrive in a fast-paced environment, possess deep curiosity, and make informed decisions based on fundamental principles, balancing efficiency with thoroughness.As a collaborative and humble team player, you will transform innovative ideas into tangible solutions and excel at executing tasks from start to finish. Leveraging AI tools, you will work smarter to resolve challenges swiftly. Join us in tackling complex issues alongside exceptional colleagues while advancing your career in the evolving world of global banking.Your ResponsibilitiesParticipate in incident response efforts related to malware, phishing, and digital forensics.Design and implement advanced security measures to protect corporate IT platforms, from endpoints to identity management systems.Engage in comprehensive investigations of security incidents, with a focus on digital forensics.Develop and deploy security tools that enhance our defense mechanisms against cyber threats.

Join our dynamic team as a dedicated Security Engineer, where your expertise will play a crucial role in safeguarding our infrastructure and applications. You will collaborate with cross-functional teams to monitor, respond to, and address security incidents within our cloud-native ecosystem, ensuring compliance and resilience.Key Responsibilities:Security Monitoring & Incident Response• Manage alerts from AWS GuardDuty, ensuring prompt investigation and remediation.• Implement and refine security playbooks to address alerts, adapting to evolving threats and operational insights.Vulnerability & Patch Management• Lead the identification and application of security patches across GitLab, AWS, and Kubernetes environments.• Ensure infrastructure resilience through regular patch cycles and proactive risk assessments.Log Analysis & SIEM Management• Conduct weekly SIEM reviews to analyze security logs for anomalies and escalate issues as necessary.• Collaborate with the SecOps team to enhance monitoring strategies and alerting thresholds.Reporting & Documentation• Generate monthly SecOps reports summarizing incident trends, responses, and areas for improvement.• Maintain comprehensive documentation related to security processes and incident responses.Collaboration & Continuous Improvement• Partner with development, operations, and other security teams to integrate security best practices into CI/CD pipelines and cloud deployments.• Actively contribute to discussions on security strategy, providing insights and recommendations to bolster our security posture.

At moomoo, we are dedicated to crafting a secure and innovative platform for our users amidst the fast-paced evolution of Web3 technologies. As a Security Engineer with a focus on Web3, you will be instrumental in safeguarding the integrity and security of our blockchain infrastructure and decentralized applications. Your role will be crucial in protecting our digital assets and user information from potential threats and vulnerabilities.Key ResponsibilitiesDesign and implement security measures and protocols for decentralized applications (dApps) to shield against vulnerabilities while ensuring optimal system performance.Perform comprehensive security audits and testing of smart contracts, identifying and addressing potential exploits before they can be exploited by malicious entities.Collaborate closely with development teams to embed security best practices throughout the application lifecycle, from initial design through to deployment.Continuously monitor and analyze the security landscape of Web3 technologies to stay ahead of emerging threats and exploit trends.Lead incident response efforts for security breaches, conducting forensic analyses, and developing strategies to mitigate future risks.

Role Overview:Join our dynamic team as a Senior Security Systems Engineer, where you will play a critical role in the design, implementation, and management of cutting-edge security surveillance systems. You'll collaborate closely with system architects and pre-sales teams to articulate and document comprehensive solutions tailored to our clients' needs.Key Responsibilities:Collaborate with the system architect and pre-sales teams to implement state-of-the-art security surveillance systems and network infrastructures both on-premise and in the cloud.Conduct thorough analysis, planning, implementation, testing, and management of integrated perimeter security, video surveillance, and video analytics systems.Leverage your expertise in software and hardware systems, including:IP CCTV SystemsFence Intrusion Detection Systems (FIDS)Physical Security Information Management Systems (PSIM)Video Management Systems (VMS)Data Protection and Identity ManagementWindows Server and Linux OS in virtual environmentsVirtualization technologies and hypervisorsNetwork monitoring solutionsLead interdisciplinary technical teams and stakeholders to design, implement, and verify solutions that meet strict performance requirements.Coordinate with partners to resolve technical issues and support both preventative and corrective maintenance.Develop implementation timelines that align with project management schedules, ensuring timely delivery of milestones.Engage with key vendors and partners to review and refine proposed solution architectures in accordance with industry standards and policies.Interpret technical documentation, installation manuals, and system drawings to facilitate effective implementation.Plan and execute various testing phases (SSAT/UAT/OSAT) to ensure compliance with project requirements.Possess a solid understanding of electrical power systems and cabling works for on-site tasks.Participate in customer meetings, providing regular updates on project progress and addressing any issues that arise.Collaborate with clients, consultants, and project managers to gain approvals on designs and review project progress.Define clear deliverables, roles, and responsibilities for technical engineers to ensure collaborative work towards established goals.Schedule and manage weekly work plans to prevent conflicts.Conduct root cause analyses for system issues and recommend effective solutions.Ensure compliance with construction site safety and regulatory standards.Monitor project finances, including budget tracking and cost management, to ensure efficient project delivery.Work comfortably in both indoor and outdoor environments.

At CSIT, we are at the forefront of cybersecurity, engaging in innovative research and development to identify system vulnerabilities and defend against sophisticated cyber threats. Our focus spans a wide array of platforms, including cloud computing, enterprise systems, mobile devices, and critical infrastructure. We are seeking dynamic individuals who are not only passionate about cybersecurity but are also eager to contribute significantly to the enhancement of Singapore's national security.Position OverviewAs a Mobile and Cloud Security Engineer, you will lead the development and deployment of state-of-the-art security solutions tailored for mobile and cloud environments. Your key responsibilities will encompass:Performing comprehensive vulnerability assessments and penetration testing for mobile, cloud, and web applications, including Content Delivery Networks (CDN) and edge computing environments.Creating and maintaining robust security tools and services applicable to mobile, cloud, and web platforms.Collaborating with cybersecurity researchers to proactively address emerging threats and innovate new security measures.Working across various teams to design and implement secure architectures for mobile, cloud, and web systems.Engaging in incident response and threat hunting initiatives to safeguard our digital assets.

About Pave BankPave Bank is pioneering the future of programmable business banking. Founded by the innovative minds behind Monzo and BigPay, we are on a mission to transform global business banking by merging cutting-edge financial infrastructure with exceptional client experiences.About the RoleAs we develop the next generation of programmable banking infrastructure, we are in search of a Senior Security Engineer who is both independent and inquisitive, equipped with a hacker mindset. This role demands a strategic thinker who can anticipate threats and fortify our platform’s security.In this pivotal position, you will act as a key protector of Pave Bank, identifying vulnerabilities, closing security gaps, and enabling our Product and Engineering teams to deploy solutions rapidly without sacrificing security.What You'll DoConduct thorough reviews of Pave Bank’s platform and product code to uncover security vulnerabilities and mentor engineers towards secure coding practices.Educate engineering and product teams on secure coding and design methodologies, highlighting their importance.Develop and enhance internal tools, libraries, and automation processes to bolster security testing and enforcement.Perform continuous testing on internal and external applications to identify vulnerabilities.Stay up-to-date with the latest threats and attack strategies, applying this knowledge to our systems.Support third-party application security assessments and penetration tests.What You’ll BringA strong adversary-first mindset in software development.A passion for tackling intricate security challenges in a dynamic startup environment.A self-driven attitude and a commitment to continuous learning and growth.A solid understanding of attacker tools and techniques and how insecure development practices can be exploited.Proficiency in at least one modern programming language, such as Go, Python, or TypeScript.Excellent communication skills, with the ability to convey security concepts to both technical and non-technical audiences.A general understanding of blockchain technologies and cryptocurrency systems, along with their unique security challenges.