{"id":3393244,"url":"https://alion.io/job/quess-singapore-principal-application-security-engineer-contract-role","title":"Principal Application Security Engineer (Contract Role)","company":{"id":261494,"name":"Quess Singapore","domain":"quesscorp.sg","url":"https://alion.io/company/quesscorp","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":18500,"max":20500,"currency":"SGD","period":"month","gross":true,"usd_annual":192060},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SDL","optional":false},{"name":"C","optional":true}],"status":"live","first_seen_at":"2026-10-28T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-28T00:00:00Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Key Responsibilities\nLead application security reviews, including manual code audits of Java and Go applications and supporting components in other languages, and provide clear, practical remediation guidance.\nAssess application architecture, business logic and data flows to identify security risks, and recommend proportionate controls.\nDefine secure development standards and integrate security checks, including static analysis, into the software development lifecycle (SDL).\nBuild, extend or tune static and dynamic analysis tooling so that common vulnerability classes are found early and at scale.\nPerform threat modelling, secure architecture reviews and penetration testing of web, backend and mobile or desktop applications (including iOS and macOS).\nInvestigate and validate relevant emerging vulnerabilities, assess their impact on our systems, and guide remediation.\nReview and improve operational security controls for sensitive systems, such as authorisation, segregation of duties, approval workflows and standard operating procedures (SOPs).\nWork with engineering teams to prioritise security findings and verify that fixes address the underlying risks.\nProvide technical guidance and mentor engineers on secure design and coding practices.\nJob Requirements:\nBachelor’s degree in Computer Science, Engineering, Information Security or a related field, or equivalent practical experience.\nAt least 6 years of professional application security experience, including technical ownership of security initiatives across engineering teams.\nStrong Java and/or Go skills, with hands-on experience manually auditing applications built with frameworks such as Spring or Gin.\nDeep understanding of common application vulnerabilities, including those in the OWASP Top 10, and of business logic flaws, access control weaknesses and authentication or session-handling issues.\nPractical experience in threat modelling, secure architecture reviews, penetration testing and implementing a secure software development lifecycle.\nExperience developing or customising code analysis tooling (for example, rules, bytecode analysis or control-flow analysis) to detect vulnerabilities.\nA demonstrated vulnerability research track record, such as CVE disclosures, vendor security acknowledgements or bug bounty contributions.\nAbility to evaluate security trade-offs, establish standards and guide remediation across complex applications.\nStrong communication and documentation skills in English, with the ability to explain risks to technical and business stakeholders.\nAdvantageous\nReverse engineering experience on iOS, macOS or Android applications, including analysis of authentication mechanisms and communication protocols.\nExperience in vulnerability research on operating system components or frameworks.\nExperience designing or reviewing encryption, data protection or Trusted Execution Environment (TEE) solutions.\nExperience using automation or AI-assisted tools to support security reviews, with independent validation of findings.\nExperience working in a regulated financial services environment.\nDisclaimer: The company is committed to ensuring theprivacy and security of your information. By submitting this form, youconsent to the collection, processing, and retention of the information youprovide. The data collected (which may include your contact details,educational background, work experience and skills) will be used solely for thepurpose of evaluating your qualifications for the position you're applying for.Your data will be stored securely and retained for the duration necessary tofulfill our hiring process. If you are not selected for the position, your datawill be kept on file for a limited period in case future opportunities arise.You have the right to access, correct, or delete your data at any time bycontacting us at Quess Singapore | A Leading Staffing Services Provider inSingapore (quesscorp.sg)\n“This is inpartnership with the Employment and Employability Institute Pte Ltd (“e2i”).\ne2i is theempowering network for workers and employers seeking employment andemployability solutions. e2i serves as a bridge between workers andemployers, connecting with workers to offer job security through job-matching,career guidance and skills upgrading services, and partnering employers toaddress their manpower needs through recruitment, training, and job redesign solutions.e2i is a tripartite initiative of the National Trades Union Congress setup to support nation-wide manpower and skills upgrading initiatives. Byapplying for this role, you consent to Quesscorp Singapore’s PDPA and e2i’sPDPA. By submitting your application for this position, youconsent to the collection, use, and disclosure of your personal data byQuesscorp and its recruitment partners, including Employment andEmployability Institute Pte Ltd, for the purpose of i) employment facilitationand ii) data and statistical analysis. You may find out more informationon the PDPA policies at Quesscorp website and[https://www.e2i.com.sg/pdpa/].\"\nSkills\nSecurity Controls, Systems Investigation, Vulnerability Research, Computer Engineering, Identifying Risks, Audit Frameworks, Java Applications, Computer Science, Penetration Testing, Access Control Management, Security Risk Analysis, Liaise With Technical Teams, Security Assessment and Testing, Software Development Lifecycle, Standards Development, Code Analysis","description_format":"text","description_chars":5411,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-28T10:28:00Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.538,"p_room":1,"age_days":2,"expected_fill_days":14,"reasons":["seen:2","agency","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":192060,"is_top_pay":false},"html_url":"https://alion.io/job/quess-singapore-principal-application-security-engineer-contract-role","json_url":"https://alion.io/job/quess-singapore-principal-application-security-engineer-contract-role.json","meta":{"generated_at":"2026-10-30T10:03:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14483,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":261494},"rest":"https://alion.io/mcp/rest/get_company?id=261494"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fquess-singapore-principal-application-security-engineer-contract-role"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fquess-singapore-principal-application-security-engineer-contract-role"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fquess-singapore-principal-application-security-engineer-contract-role"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/quess-singapore-principal-application-security-engineer-contract-role\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fquess-singapore-principal-application-security-engineer-contract-role"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3393244}},{"tool":"search_jobs","arguments":{"company":"quesscorp.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3393244},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}