DHL Express - a company that connects people!

At DHL Express, our people are at the heart of everything we do. As the world's leading international express logistics company, we connect people and improve lives through our global network, innovative technology, and commitment to excellence. Recognised as one of the world's best workplaces, we foster an inclusive environment where employees are empowered to grow, innovate, and make a meaningful impact. 

If you are passionate about cybersecurity and committed to help protect global business at scale, we'd like to hear from you! We are looking for an Application Security Manager to join as a member of our Global Head Office in Singapore (preferred), or Cyberjaya, Malaysia.

Role Purpose

Reporting to the Domain Director, you will play a key role in strengthening the security of DHL Express applications across the software development lifecycle (SDLC). You will work closely with technology teams, architects, developers, and business stakeholders to embed security-by-design principles, identify security risks, and support the delivery of secure digital solutions.

The role combines technical expertise, advisory capabilities, and stakeholder management to drive application security assessments, security automation, secure development practices, and continuous improvement of DHL's cybersecurity posture. You will also contribute to the development and implementation of application security standards, policies, processes, and tools aligned with industry-recognised frameworks and best practices.

Key Responsibilities

• Support implementation of Cyber Security Program (Cyber Security Expertise Center) in DHL Express.

• Provide technical mentorship to team in key areas such as Cloud Security, web application security, anti-bot technologies, DevSecOps, CI/CD security, and secure coding practices.

• Deliver Application Security Assessment activities with entities within DHL Express and external suppliers/customers.

• Run in-depth assessments on the applications using SAST, DAST, SCA, Penetration Testing, Red Teaming Activities to determine application security posture and potential vulnerabilities.

• Provide guidance to the design and development of solutions under the cyber-security counter-measure plan by conducting Threat Modelling on the applications.

• Ensure appropriate security counter measures and plans are developed by Business IT, IT Services and its IT service suppliers.

• Indirect support of Corporate Functions (Security, Compliance, Data Protection) and external customers/suppliers for cyber security related request.

• Report effectiveness of DHL Express cyber-security readiness to technical asset owner with explicit focus on high risk / high impact threats / vulnerabilities / incidents and actions being taken for mitigation.

• Provide support to the Risk/Compliance/Audit function on DHL Express cyber risk exposures.

• Provide input to the design and development of management practices and solutions selected from the cyber security counter measure plan.

• Develop and deliver Cyber Security best practices/processes/tool.

• Work with global, regional and country stakeholders to support the cyber security reviews.

Do you have what it takes?

• Degree in Computer Science, Information Systems, Cyber Security, or a related discipline.

• Professional certifications such as CISSP, CISM, CISA, CRISC, OSCP, CSSLP or equivalent.

• Preferably 8 years of professional experience in Cyber Security, Information Security, Application Security, or related technical security domains, within large multinational or globally distributed technology environments

• Hands-on experience performing application security assessments and vulnerability management activities.

• Experience with secure SDLC practices, DevSecOps methodologies, and CI/CD security integration.

• Practical knowledge of application security testing methodologies and frameworks, including OWASP Top 10, OWASP ASVS, OSSTMM, SANS, or similar industry standards.

• Strong understanding of web application security, API security, cloud security concepts, and secure coding principles.

• Ability to communicate technical risks and recommendations effectively to diverse stakeholder groups.

• Proficiency in spoken and written English.

DHL is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.

Recruitment Fraud Alert: DHL Express will never request payment or personal/financial information from applicants or employees at any stage of the recruitment process. Any such request should be treated as fraudulent. All email correspondence will be sent from the official DHL domain e.g. name@dhl.com. Protect yourself by verifying job offers and communications. Your safety is important to us.