Application Security Engineer - Global Monetization - Singapore

岗位职责 / Responsibilities

We are the Global Monetization Product and Technology Security BP team. We partner closely with product, engineering and operations to safeguard Global Monetization Product and Technology across regions. Our scope covers application security, data security, privacy compliance and architecture security. We build and operate the SDLC/DevSecOps security program, conduct threat modeling, code reviews, penetration testing, red/blue exercises and vulnerability management, respond to security incidents rapidly and drive systemic fixes. We value pragmatism, ownership and cross-team collaboration, protecting business growth and user trust at global scale.

- Conduct vulnerability discovery and risk management for Global Monetization Product and Technology business-related applications and mobile apps, and provide security assurance and support for key projects.

- Participate in building and improving the SDLC security system and processes, mitigate potential security risks during the design and development phase, and address security risks from the architectural level.

- Build security-related capabilities and processes, including security assessment, code auditing, penetration testing, vulnerability discovery and attack and defense drills, working closely with product development teams to improve business security.

- Track domestic and international security trends and vulnerabilities, respond quickly to security incidents, propose solutions and technical analysis, and coordinate with multiple departments for resolution.

任职要求 / Requirements

Minimum Qualifications

- Bachelor’s degree or above in Computer Science, Information Security or a related technical field.

- Solid understanding of common web, mobile application and system vulnerabilities and their remediation.

- Hands-on white-box auditing skills; able to review Python, Go, Node.js or Java, and capable of automating repetitive security tasks.

- Experience participating in SDLC or DevSecOps security practices, including policies, controls and scanning tools, and collaborating with product and engineering teams.

- Able to learn new concepts quickly and solve technical problems analytically; keeps up with the latest security trends.

- Clear communication and collaboration skills, and a commitment to professional ethics.

Preferred Qualifications

- Experience building or optimizing SDLC or DevSecOps security programs at scale.

- Specialized expertise in one or more areas: application security, data security, privacy compliance or architecture security.

- Experience with red-team and blue-team security exercises, incident response or security operations across regions.