{"id":1157757,"url":"https://alion.io/job/sopra-steria-application-security-engineer-2","title":"Application Security Engineer","company":{"id":52881,"name":"Sopra Steria","domain":"soprasteria.com","url":"https://alion.io/company/soprasteria","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":382,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":75000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-09-23T03:36:11Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-25T02:38:36Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":32},"description":"Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.\nIn Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria’s Infrastructure, Cloud and Cybersecurity services.\n Description:\nFor this project, we are forming a team of 6 (including 1 team lead) to assist in a huge government project to perform the following scope of works:\nSecurity Risk Assessment\nSecurity Policies, Standards, Guidelines, And Procedures Review\nSecurity Design\nApplication Security\nVulnerability assessment and\nSystem Security Acceptance Testing\nCloud Security\nThe selected candidate will be working collaboratively within the team to fulfil the project requirements. As such, there is no expectation for one individual to possess all skill sets in the 6 domains.\nAs an expert in Application Security, your role will focus on providing expert advice, conducting security assessments, and helping government teams build security into every stage of their software development lifecycle.\nResponsibilities:\nPerform comprehensive risk assessments of development environments, DevOps workflows, and CI/CD processes.\nPerform security assessments, threat modelling, and code reviews to identify vulnerabilities in applications.\nReview and recommend improvements in areas such as identity and access management, network security, secure SDLC practices, source code management, cryptographic key handling, and data protection.\nGuide application teams on adopting secure development practices and integrating security tools such as SAST, DAST, and VAPT into their workflows.\nReview existing CI/CD pipelines from a security perspective and provide expert recommendations to align with DevSecOps principles.\nMentor and advise internal teams on secure coding practices across various platforms and languages (e.g., JavaScript, Node.js, Java, C#, Python, etc.).\nDevelop and maintain secure coding guidelines and security standards.\nCollaborate with development teams to remediate security issues and provide guidance on secure coding practices.\n At least 3 years of experience in application security or software development with security focus.\nStrong experience in DevSecOps with a solid foundation in cybersecurity and risk assessment.\nHands-on knowledge of secure software development lifecycle (SSDLC) principles and tools.\nFamiliarity with integrating security testing tools and practices within CI/CD environments.\nExperience with secure coding and vulnerability assessments across common web and mobile technologies.\nAbility to work with and guide development teams without being directly involved in implementation.\nExcellent communication skills and the ability to translate complex security requirements into practical advice\n\nWork-life balance: Hybrid working mode, 18 days of Annual leave\nHealth & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical\n\nPerformance incentives: Annual bonus based on individual performance\n\nLearning & development: Training programs, certification opportunities, and training incentives to support career growth\n\nTeam culture: Regular team-building activities and social events","description_format":"text","description_chars":3399,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Annual leave","Hybrid work"],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-09-23T22:18:52Z"}],"visa":[],"liveness":{"score":30,"band":"fade","label":"Fading","p_open":1,"p_active":0.545,"p_room":0.55,"age_days":32,"expected_fill_days":27,"reasons":["conf:3","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/sopra-steria-application-security-engineer-2","json_url":"https://alion.io/job/sopra-steria-application-security-engineer-2.json","meta":{"generated_at":"2026-10-25T06:11:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8458,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52881},"rest":"https://alion.io/mcp/rest/get_company?id=52881"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsopra-steria-application-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsopra-steria-application-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsopra-steria-application-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sopra-steria-application-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsopra-steria-application-security-engineer-2"}]}