Job Description
Industry/ Organization Type: Cybersecurity
Position Title: Software Engineer
Working Location: Bedok
Working Hours: 5 days (Mon – Fri, 9.00am – 6.00pm)
Salary Package: Basic salary up to $65,000 + Flexi Benefits + Variable Bonus
Duration: Permanent Role
Key Responsibilities
Design, develop, and maintain a full-featured Chrome Extension for credential management, including password capture, autofill, password generation, secure sharing, and organizational vault features
Implement secure local and cloud-based storage with end-to-end encryption and proper use of Chrome Extension storage APIs
Develop intuitive user interfaces and ensure smooth autofill functionality across various web applications and authentication flows
Integrate FIDO2/WebAuthn soft token capabilities, including secure key generation, storage, authentication flows, and multi-authenticator management
Ensure compliance with FIDO2 standards and implement biometric authentication where applicable
Apply secure key derivation and credential management practices
Design and implement secure RESTful APIs between the Chrome Extension and Java/Tomcat backend systems
Implement secure session management, token-based authentication (e.g., JWT, OAuth 2.0), and data synchronization across devices
Develop robust error handling, recovery processes, and audit logging for security-related operations
Apply industry-standard encryption protocols (e.g., AES, RSA) and follow secure coding standards such as OWASP guidelines
Conduct security reviews and basic threat assessments to ensure compliance with relevant security standards and regulations
Write clean, maintainable, and well-documented code, supported by unit and integration testing
Optimize performance to minimize resource usage and participate in code reviews and technical documentation
APPLY NOW!!!
At least 5 years of experience in software development, including at least 3 years of hands-on experience developing Chrome Extensions (Manifest V3)
Strong proficiency in JavaScript/TypeScript, HTML5, CSS3, and solid understanding of Chrome Extension APIs (e.g., storage, identity, webRequest)
Experience with modern JavaScript frameworks such as React, Vue, or Angular
Good understanding of cryptography principles, encryption algorithms (e.g., AES, RSA), secure key management, and secure coding practices
Experience implementing WebAuthn/FIDO2 standards and working with authentication and authorization protocols
Experience designing, consuming, and integrating RESTful APIs, preferably with Java-based backend systems and application servers such as Tomcat
Knowledge of JWT, OAuth 2.0, session management, and browser security models including Content Security Policy (CSP)
Experience implementing secure data storage and transmission, and familiarity with security testing tools and methodologies
Familiarity with version control systems such as Git