Security Architect

Oneconnect Financial Technology Pte Ltd.; Kuala Lumpur; On-site; MYR 240,000 - 480,000; Full time

Job summary

Oneconnect Financial Technology Pte Ltd. seeks a seasoned security architect to lead design and implementation of robust security architectures for cloud-native applications and financial systems, ensuring alignment with MAS TRM, PCI DSS, and Zero Trust across global operations.

You will drive threat-driven architecture, advanced security engineering, offensive security leadership, and governance, mentoring engineers and coordinating with CISO/CTO on risk and compliance.

Qualifications

• 7+ years in security architecture with 3+ years in financial services.
• Proven design experience for high-TPS systems and mobile banking apps.
• Experience reducing critical vulnerabilities YOY by 40% or more.
• Experience mentoring engineers in advanced penetration testing.

Responsibilities

• Lead threat-driven architecture design for cloud-native apps and financial systems.
• Architect and implement runtime protection, mobile hardening, and API security.
• Oversee red team ops targeting payment gateways and core banking APIs.
• Drive compliance with MAS TRM, GDPR, and certifications (ISO 27001, SOC 2).

Skills

Threat modeling

Security architecture

Cloud security

Mobile security

Red team leadership

Vulnerability discovery (SAST/DAST/IA/

Compliance governance

CISO/CTO liaison (FAIR)

CBDC security

Tools

RASP

WAF/IPS

SAST/DAST/IAST tooling

Confidential computing

Job description

Lead the design and implementation of robust security architectures for cloud-native applications and financial systems, ensuring alignment with MAS TRM, PCI DSS, and Zero Trust frameworks across global operations.

Core Responsibilities

1. Threat-Driven Architecture Design

• Develop security blueprints for web/mobile applications (Android/iOS), microservices, and hybrid cloud environments (AWS/Azure).
• Integrate threat modeling (e.g., STRIDE, PASTA) into SDLC for critical financial products.

2. Advanced Security Engineering

• Architect and implement:
• *Runtime Protection*: RASP, container security, API gateways with WAF/IPS.
• *Mobile Hardening Suites*: Anti-tampering, code obfuscation, SSL pinning solutions.

3. Offensive Security Leadership

• Oversee red team operations targeting payment gateways, core banking APIs, and mobile platforms.
• Establish vulnerability discovery automation pipelines (SAST/DAST/IAST).

4. Compliance & Governance

• Translate MAS TRM, GDPR, and China DSL into technical controls.
• Lead security certifications (ISO 27001, SOC 2) for cloud deployments.
• Drive adoption of:
  • LLM security guardrails for AI-powered financial services
  • Confidential computing for sensitive data processing

Experience Requirements

• 7+ years in security architecture roles with 3+ years in financial services.
• Proven track record designing security for:
• High-TPS systems (>500 transactions/sec)
• Mobile banking apps with >8M users
• Reduction of critical vulnerabilities by ≥40% YOY
• Security architecture diagrams for cloud migration projects
• Mentor security engineers on advanced penetration testing (e.g., WebSockets exploitation, blockchain MEV attacks).
• Interface with CISO/CTO on cyber risk quantification (FAIR model) and tech debt management.
• Develop security standards for emerging tech: CBDC, embedded finance, BNPL platforms.