Application Security Engineer

Application Security Consultant

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

You will be a member of the application security core center of competency under the Development & Innovation for Technology ProducTisation & Operations (DITTO) department.

You will provide application security consultancy and support to the application teams in areas such as security assessments, DevSecOps, security training and awareness to raise the application security level of competency and standards of our people and organisation.

Responsibilities

1. Plan the application security roadmap to improve the way application security is practiced in the organisation.
2. Develop secure application development practices, standards, guidelines, and solutions to raise the application security practices of our application teams.
3. Maintain various application security processes and automated source code scanning platform in the organisation.
4. Perform secure code quality reviews and conduct application penetration testing/vulnerability assessment.
5. Support various types of application testing and delivery (e.g. CI/CD) within the organisation.
6. Train and up-skill developers in the area of secure coding in various programming platforms such as Java, C#, PHP etc. and to write security acceptance criteria in user stories.
7. Train the applications team to write security unit tests and perform secure coding assessments.
8. Work with DevOps team to improve security in the CI/CD pipeline.