Information Security - Secure SDLC Engineer
Smart Apply
Similar jobs
Salary
≈ $44k – $92k per year (Estimated)
Location
In office (Singapore)
Seniority
Middle · 3+ years exp
Confirmed on the employer's own hiring board on Oct 30, 2026. First seen by Alion on Oct 29, 2026. Shopee scores A on the Alion truth index.
Overview
Company
Impact
Profile match
Shopee is a multinational technology company and e-commerce marketplace platform operating as a subsidiary of Sea Limited. The company provides a hybrid B2C and C2C digital marketplace offering retail products, integrated digital payments and financial services via ShopeePay/SeaMoney, and end-to-end logistics and fulfillment solutions through SPX Express. Headquartered in Singapore, the platform serves millions of consumers and merchant partners across Southeast Asia, Taiwan, and Latin America.
- Validate vulnerabilities discovered by AI, communicate remediation plans with engineering teams, and drive timely fixes;
- Drive the rollout of the Secure SDLC across the software development lifecycle, including SAST, DAST and SCA capabilities integrated into the development pipeline, to improve SDLC quality and efficiency;
- Participate in security reviews of business requirements and architecture designs, and perform security assessments, testing and penetration testing of web applications, APIs and internal systems;
- Design security solutions at the architecture and system level, and provide security support to business lines and drive their implementation;
- Build and improve security automation and tooling, including in-house AI agents for security workflows, to scale coverage beyond manual review;
- Assess the security of AI-powered features and internal AI tooling, such as prompt injection, unsafe tool/agent invocation, data leakage and over-permissive integrations;
- Support vulnerability response and incident investigation, and keep up with industry trends to continuously strengthen the company’s security posture.
- Bachelor’s degree or above in Information Security, Computer Science or a related field, with at least 3 years of security-related experience at an internet company;
- Solid web and networking fundamentals: familiar with common web vulnerabilities and the OWASP Top 10, able to explain the root cause, exploitation path and correct remediation of each class, and understand L4/L7 protocols, HTTP, TLS, and session and authentication mechanisms;
- Hands-on experience in rolling out SDLC processes and building security programs on the in-house (enterprise) side, with SDLC experience at an internet company; experience independently leading SDLC adoption for a large business line is a plus;
- Proficient in at least one programming language such as Java, Python, PHP, Go, C or JavaScript, with development or security architecture experience and an understanding of common internet technology architectures and practices;
- Extensive experience in vulnerability research, code auditing and security solution design, with knowledge of industry standards and security frameworks;
- Solid understanding of core LLM and AI Agent concepts (context, prompts, tool calling and task decomposition) and hands-on AI for Security experience; aware of the security risks in AI/LLM applications (e.g. OWASP Top 10 for LLM Applications);
- Strong communication skills, cross-team collaboration and project-driving ability, able to explain vulnerabilities clearly to engineers without a security background.
Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
2,071,144 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Free forever. No card. Under a minute.
Your match
How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.
Recommended for you based on this role
Security
Similar stack
Same company
Singapore
DevSecops Engineer
1 day ago
$61k – $80k per year (gross) · In office · Full-Time · 5+ years exp · Singapore
Go
JavaScript
Kotlin
TypeScript
Frontend
Next.js
React.js
DevOps
Terraform
Datadog
Dynatrace
GitLab CI
CI/CD
AWS
Docker
Kubernetes
Amazon EKS
IAM
Amazon ECS
Cybersecurity
Least Privilege
Trend Micro
Apply
Network & Cyber Security Engineer
7 hours ago
≈ $54k – $108k per year (Estimated) · In office · Full-Time · 5+ years exp · Bachelor's Degree · Singapore
AI/ML
Machine Learning
DevOps
Windows Server
VLAN
Cybersecurity
Active Directory
IoT
OPC UA
Energy
IEC 61850
Apply
$66k – $94k per year (gross) · In office · Full-Time · 6+ years exp · Singapore
Apply
DevSecOps Engineer
1 day ago
$56k – $84k per year (gross) · In office · Full-Time · 3+ years exp · Singapore
Python
Bash
AI/ML
LLM
ISO 42001
DevOps
Terraform
GitHub Actions
OpenTofu
Azure
CI/CD
GitOps
ArgoCD
Git
AWS
Kubernetes
IAM
Linux
DNS
Cybersecurity
ISO 27001
OWASP Top 10
SOC 2
Least Privilege
Cryptography
Vault
Apply
Cyber Security Incident Responder
1 day ago
$47k – $75k per year (gross) · In office · Full-Time · 1+ year exp · Singapore
Ruby
Ruby
Ruby on Rails
DevOps
Incident Management
Cybersecurity
EnCase
Apply
Threat Hunter Lead
1 day ago
≈ $55k – $128k per year (Estimated) · In office · 7+ years exp · Singapore
Python
PowerShell
DevOps
Splunk
Platform Engineering
Linux
Windows
Cybersecurity
Microsoft Sentinel
MITRE ATT&CK
Sysmon
SIEM
Apply
Senior Specialist - Kit Management
1 day ago
≈ $30k – $62k per year (Estimated) · In office · Full-Time · 2+ years exp · Singapore
Analytics
Microsoft Excel
Management
Agile
Oracle ERP
Apply
Sales Development Representative - ASEAN
1 day ago
≈ $35k – $65k per year (Estimated) · Hybrid · Full-Time · 2+ years exp · Bachelor's Degree · Singapore
DevOps
GCP
AWS
Apply
≈ $72k – $160k per year (Estimated) · In office · Full-Time · Singapore
Python
SQL
Apply
≈ $62k – $139k per year (Estimated) · In office · Full-Time · 5+ years exp · Singapore
AI/ML
Copilot
Apply
This is one of many
2,071,144 more open roles from verified company boards, updated every day.