Information Technology - Principal Technologist (Application Security Architect)

SINGAPORE AIRLINES LIMITED; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Singapore Airlines Limited is seeking a Software Security Architect to lead internal security consulting, design security solutions, and enable business outcomes while maintaining robust security postures. The role reports to the CISO and focuses on threat-driven reviews and secure AI governance.

The candidate will drive shift-left security by integrating security-by-design, enhancing CI/CD tooling, and guiding security champions across multiple domains.

Qualifications

• Bachelor's degree in computer science, engineering, or related fields.
• 5+ years of software engineering experience.
• 3+ years of leadership in technology architecture or security consulting.
• Experience in application security architecture and threat modelling.
• Familiarity with AI/ML security challenges including LLM, MCP, Agentic AI.

Responsibilities

• Lead a team of security architecture consultants in threat-driven reviews and threat modelling.
• Architecture reviews including identity flows such as OAuth2, JWT, and AI deployments.
• Continually improve AI-enabled threat modelling and pilot new AI initiatives supporting Cybersecurity capabilities.
• Drive strategic security architecture decisions across business units and technology domains.
• Build security-by-design into development workflows and enhance CI/CD security tooling.
• Engage with platform and DevOps engineering teams to build secure infrastructure and technology foundations.
• Lead agentic AI security initiatives with focus on authentication and authorization of AI agents.

Skills

Threat modelling

Security architecture

AI security

Team leadership

OAuth2

JWT

Education

Bachelor's degree in CS/Engineering

Tools

SAST

DAST

SCA

Container scanning

Secrets management

Job description

We are seeking a Software Security Architect with a strongdevelopment and solution background to lead our internal security consultingteam and design security solutions that enable business outcomes whilemaintaining robust security postures. This role reports to CISO.

Key Responsibilities

Application Security Reviews and Threat Modelling

• Lead a team of security architecture consultants, providingthreat-driven architecture security reviews and threat modelling
• Architecture reviews include identity flows such as Oauth2, JWT,and AI deployments (MCP, RAG, Agent harness, Context engineering)

• Continually improve existing AI-enabledthreat modelling and pilot new AI initiatives supporting Cybersecuritycapabilities

Build Security In / Shift Left

• Drive strategic security architecture decisions across businessunits and technology domains
• Build security-by-design into development workflows
• Enhance CI/CD security tooling and automation and drive adoptionand metrics reporting
• Reignite Security Champions initiative to improve shift leftapproach

Enterprise and Identity security architecture

• Design identity governance solutions for hybrid and multi-cloudenvironments
• Develop identity integration strategies for AI systems andautomated decisioning
• Engage with platform and DevOps engineering teams to buildsecure infrastructure and technology foundations
• Build positive flywheel effect among stakeholders to enablesecurity adoption and cultural transformation

Agentic and Gen AI Security

• Design and integrate security frameworks for Gen AI deployment,monitoring, and governance within AI risk framework
• Maintain security blueprints for (Gen) AI deployments, includingMCP and AI guardrails
• Lead agentic AI security initiative with focus on authenticationand authorization of AI agents

Requirements

• Bachelor's degree in computer science, engineering, orrelated fields
• Strong software engineering background with more than 5 years ofexperience as a software engineer / developer.
• 3+ years of team or lateral leadership experience in technologyarchitecture or security consulting teams
• Experienced in application security architecture/threatmodelling.
• Led complex, multi-stakeholder security initiatives.
• Experience with AI/ML security challenges and solutionsincluding Large Language Model (LLM), Model Context Protocols (MCP), Agentic AI
• Comprehensive knowledge of application security principles(OWASP, SANS, etc.)
• Experience with modern security tooling: SAST, DAST, SCA,container scanning, secrets management
• Relevant certifications (eg. SANS, AWS, Azure)

We thank all candidates for your interest in SingaporeAirlines, and regret that only shortlisted candidates will be notified.