Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted today

Principal Application Security Engineer (Contract Role)

QUESSCORP SINGAPORE PTE. LTD.

Pay
SGD 18,500 – SGD 20,500 a Monthly
Where
Singapore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Application Security Engineer (Contract Role)QUESSCORP SINGAPORE PTE. LTD. · Singapore

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on QUESSCORP SINGAPORE PTE. LTD.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.4% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.4%7 days
  4. 20.0%14 days
  5. 35.5%30 days
  6. 58.6%60 days
This job: posted today

The posting

Key Responsibilities

  • Lead application security reviews, including manual code audits of Java and Go applications and supporting components in other languages, and provide clear, practical remediation guidance.
  • Assess application architecture, business logic and data flows to identify security risks, and recommend proportionate controls.
  • Define secure development standards and integrate security checks, including static analysis, into the software development lifecycle (SDL).
  • Build, extend or tune static and dynamic analysis tooling so that common vulnerability classes are found early and at scale.
  • Perform threat modelling, secure architecture reviews and penetration testing of web, backend and mobile or desktop applications (including iOS and macOS).
  • Investigate and validate relevant emerging vulnerabilities, assess their impact on our systems, and guide remediation.
  • Review and improve operational security controls for sensitive systems, such as authorisation, segregation of duties, approval workflows and standard operating procedures (SOPs).
  • Work with engineering teams to prioritise security findings and verify that fixes address the underlying risks.
  • Provide technical guidance and mentor engineers on secure design and coding practices.

Job Requirements:

  • Bachelor’s degree in Computer Science, Engineering, Information Security or a related field, or equivalent practical experience.
  • At least 6 years of professional application security experience, including technical ownership of security initiatives across engineering teams.
  • Strong Java and/or Go skills, with hands-on experience manually auditing applications built with frameworks such as Spring or Gin.
  • Deep understanding of common application vulnerabilities, including those in the OWASP Top 10, and of business logic flaws, access control weaknesses and authentication or session-handling issues.
  • Practical experience in threat modelling, secure architecture reviews, penetration testing and implementing a secure software development lifecycle.
  • Experience developing or customising code analysis tooling (for example, rules, bytecode analysis or control-flow analysis) to detect vulnerabilities.
  • A demonstrated vulnerability research track record, such as CVE disclosures, vendor security acknowledgements or bug bounty contributions.
  • Ability to evaluate security trade-offs, establish standards and guide remediation across complex applications.
  • Strong communication and documentation skills in English, with the ability to explain risks to technical and business stakeholders.

Advantageous

  • Reverse engineering experience on iOS, macOS or Android applications, including analysis of authentication mechanisms and communication protocols.
  • Experience in vulnerability research on operating system components or frameworks.
  • Experience designing or reviewing encryption, data protection or Trusted Execution Environment (TEE) solutions.
  • Experience using automation or AI-assisted tools to support security reviews, with independent validation of findings.
  • Experience working in a regulated financial services environment.

Disclaimer: The company is committed to ensuring theprivacy and security of your information. By submitting this form, youconsent to the collection, processing, and retention of the information youprovide. The data collected (which may include your contact details,educational background, work experience and skills) will be used solely for thepurpose of evaluating your qualifications for the position you're applying for.Your data will be stored securely and retained for the duration necessary tofulfill our hiring process. If you are not selected for the position, your datawill be kept on file for a limited period in case future opportunities arise.You have the right to access, correct, or delete your data at any time bycontacting us at Quess Singapore | A Leading Staffing Services Provider inSingapore (quesscorp.sg)

“This is inpartnership with the Employment and Employability Institute Pte Ltd (“e2i”).

e2i is theempowering network for workers and employers seeking employment andemployability solutions. e2i serves as a bridge between workers andemployers, connecting with workers to offer job security through job-matching,career guidance and skills upgrading services, and partnering employers toaddress their manpower needs through recruitment, training, and job redesign solutions.e2i is a tripartite initiative of the National Trades Union Congress setup to support nation-wide manpower and skills upgrading initiatives. Byapplying for this role, you consent to Quesscorp Singapore’s PDPA and e2i’sPDPA. By submitting your application for this position, youconsent to the collection, use, and disclosure of your personal data byQuesscorp and its recruitment partners, including Employment andEmployability Institute Pte Ltd, for the purpose of i) employment facilitationand ii) data and statistical analysis. You may find out more informationon the PDPA policies at Quesscorp website and[https://www.e2i.com.sg/pdpa/]."

Posting text belongs to the employer. Removal requests: contact us.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against QUESSCORP SINGAPORE PTE. LTD.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on QUESSCORP SINGAPORE PTE. LTD.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    QUESSCORP SINGAPORE PTE. LTD.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.