Lead AppSec Engineer

About the role

PropertyGuru empowers property seekers with more than 2.1 million real estate listings, in-depth insights, and solutions that enable them to make confident property decisions across Singapore, Malaysia, Thailand and Vietnam. Recognised as a Top Employers Certified* organisation, we’re proud to be among the best workplaces in the region—celebrating an inclusive culture of excellence, growth, and well-being.

What you'll do

• We’re looking for a Lead Application Security Engineer to shape and drive our AppSec strategy across modern, high-scale web, mobile, API, data, and AI-powered products
• Operate as a senior individual contributor and technical authority, partnering closely with engineering, product
• Define standards and patterns, lead architecture-level risk assessments, build automation, run offensive testing against AI systems
• Evolve AppSec strategy across application types (web, mobile, APIs, data, AI/ML); define standards, secure-by-default patterns, and roadmap
• Own threat modelling as a practice: run structured sessions (STRIDE, DREAD or equivalent) with engineering teams on critical services and AI/ML pipelines

What you need

• 8–14 yrs of experience
• Vulnerability assessment
• OWASP
• Python
• Machine learning
• CI/CD
• LLMs
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• AWS
• Terraform
• Bash
• API testing
• JIRA
• Jenkins