Application Security Manager

Overview

DHL Express is a global leader in international express logistics, dedicated to connecting people and enhancing lives through a worldwide network, advanced technology, and excellence. Recognized as a top workplace, we nurture an inclusive culture where employees are encouraged to innovate, grow, and contribute significantly.

We are inviting a passionate cybersecurity professional to join us as an Application Security Manager based preferably in Singapore or Cyberjaya, Malaysia, as part of our Global Head Office team. This role is essential in fortifying DHL Express's application security throughout the software development life cycle.

Primary Responsibilities

• Assist in deploying the Cyber Security Program (Cyber Security Expertise Center) within DHL Express.
• Provide expert technical guidance to teams on areas including Cloud Security, web application security, anti-bot mechanisms, DevSecOps, CI/CD pipeline security, and secure coding standards.
• Conduct thorough application security assessments for DHL entities and external collaborators using tools and methods such as SAST, DAST, Software Composition Analysis, penetration testing, and red teaming to evaluate security status and uncover vulnerabilities.
• Lead threat modeling initiatives to advise solution design and development aligned with cyber security countermeasures.
• Oversee the development of appropriate security countermeasures and action plans in collaboration with Business IT, IT Services, and service providers.
• Provide indirect support to corporate security functions and external partners for cyber security inquiries and requirements.
• Report on the cyber-security preparedness of DHL Express's technical assets, focusing on critical risks, threats, vulnerabilities, and mitigation efforts.
• Support Risk, Compliance, and Audit teams concerning DHL Express's cyber risk exposures.
• Contribute to the design and implementation of management practices and solutions derived from the cyber security countermeasure strategy.
• Develop and promote cybersecurity best practices, processes, and tools throughout the organization.
• Collaborate globally, regionally, and locally with stakeholders to assist in cyber security reviews.

Required Qualifications and Skills

• Bachelor's degree in Computer Science, Information Systems, Cyber Security, or a related field.
• Professional certifications such as CISSP, CISM, CISA, CRISC, OSCP, CSSLP, or equivalent credentials.
• Approximately eight years of relevant professional experience in Cyber Security, Information Security, Application Security, or related technical areas, ideally within large multinational or globally distributed IT environments.
• Practical hands-on experience in performing application security assessments and managing vulnerabilities.
• Familiarity with secure SDLC methodologies, DevSecOps practices, and security integration within CI/CD pipelines.
• Knowledge of application security testing frameworks and standards, including OWASP Top 10, OWASP ASVS, OSSTMM, SANS, or comparable industry guidelines.
• A solid grasp of web application, API, and cloud security concepts coupled with secure coding principles.
• Excellent communication skills to effectively articulate technical risks and solutions to varied stakeholders.
• Proficiency in English, both spoken and written.

Additional Information

DHL remains committed to equal employment opportunity, ensuring no discrimination based on race, sex, religious belief, gender identity, disability, or any protected status. Recruitment fraud warnings: DHL will never ask for payments or sensitive personal or financial information during hiring. All official communications come exclusively from the DHL domain (e.g., name@dhl.com). Candidates are advised to verify all job offers and correspondences to ensure safety.