About this role
Join GovTech as an Application Security Engineer to enhance the security of internally developed products by integrating security throughout the software development lifecycle. You will collaborate with engineering teams to embed security controls into CI/CD pipelines, conduct code reviews, and perform threat modeling to deliver secure applications from design to deployment.
What we are looking for 6
- Integrate security practices throughout the SDLC for internally developed products
- Embed security checks into CI/CD pipelines (SAST, DAST, SCA, secret detection)
- Advise development teams on secure design, implementation, and coding practices
- Conduct targeted code reviews and threat modeling for APIs and web applications
- Validate vulnerabilities, prioritize risks, and recommend remediation
- Track remediation and improve security practices across development workflows