Senior Application Security Architect

This is a fully remote position, open to applicants in Singapore.

📋 Description

• Design and implement secure application architectures, taking into account elements such as authentication, authorization, data protection, and vulnerability management.

• Develop and uphold secure coding guidelines and standards.

• Perform architectural and security requirement reviews to identify and assess potential security risks, as well as to mitigate risks that may arise from new products, functions, bug fixes, and more.

• Create and enforce security controls and countermeasures to address identified risks.

• Conduct regular security audits or penetration testing.

• Ensure adherence to relevant security standards and regulations (e.g., OWASP).

• Keep abreast of the latest security threats, vulnerabilities, and incidents within the community.

• Conduct preliminary research in the company's product business area to gain a deep understanding of the business and reserve security technology research.

• Gradually establish a foundation for risk identification based on various products and security solutions.

• Communicate security risks and recommendations effectively to stakeholders.

• Provide guidance and mentorship to teams on security best practices and secure coding techniques.

⛳️ Requirements

• A bachelor's degree or higher in computer science or a related discipline.

• Over 6 years of experience in application security or software development; more than 10 years is preferred.

• Strong knowledge and application of software development principles and the Software Development Life Cycle (SDLC).

• Proficient in mainstream web application development technologies, with a preference for a Java-based tech stack.

• Well-versed in the causes and solutions for OWASP TOP 10 security issues.

• Skilled in the technical implementation of common security solutions.

• Understanding of basic techniques in penetration testing and security testing.

• Familiar with static security scanning tools for code, along with problem analysis and solution design.

• Basic knowledge of mobile and web security.

• Systematically understand the formation mechanisms of application security vulnerabilities and possess the capability to design corresponding solutions in line with industry best security practices.

• Familiar with threat modeling and attack surface analysis, with practical experience preferred.

• Bilingual proficiency in English and Mandarin is essential to coordinate with overseas partners and stakeholders.

• Ability to work independently as well as collaboratively within a team.

• Strong problem-solving and analytical skills.

🏝️ Benefits

• Competitive salary and comprehensive company benefits.

• Work-from-home arrangement (this may vary depending on the specific work nature of the business team).