Lead Application Security Architect

THE VINE SEARCH PTE. LTD.; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

THE VINE SEARCH PTE. LTD.

in Singapore is seeking a Software Security Architect to lead our internal security consulting team, with a sharp focus on the mobile ecosystem (native and hybrid, iOS/Android) and the broader enterprise. You will drive threat-driven architecture reviews for mobile clients and SDKs, identity flows (OAuth2, JWT) and AI deployments, and advance AI-enabled threat modelling across the organization.

Qualifications

• Bachelor's degree in CS, Engineering or equivalent.
• 5+ years as a software engineer/developer; mobile dev/security a plus.
• 3+ years leading a team in security architecture/consulting.
• Threat modelling experience, ideally mobile (OWASP MASVS/MSTG).
• Track record delivering complex, multi-stakeholder initiatives.
• Hands-on AI/ML security: LLMs, MCP, agentic AI.
• Strong OWASP/SANS fundamentals; SAST, DAST, SCA, container scanning.
• Certifications (SANS, AWS, Azure) a plus.

Responsibilities

• Lead threat-driven architecture reviews - mobile clients/SDKs, identity flows (OAuth2, JWT), AI deployments (MCP, RAG, agent harnesses).
• Advance AI-enabled threat modelling; pilot new initiatives.
• Drive architecture decisions across business units, mobile pipelines included.
• Build security-by-design into mobile app development.
• Uplift CI/CD security tooling (mobile SAST/DAST, secrets management).
• Relaunch Security Champions into a programme people want to join.
• Design identity governance across hybrid/multi-cloud, including on-device token handling.
• Architect frameworks for Gen AI deployment, monitoring, governance.
• Own security blueprints for Gen AI, MCP, AI guardrails.
• Lead agentic AI security - auth/authz of AI agents.

Skills

Threat modelling

Mobile security

Security architecture

Leadership

AI security

IAM/OAuth2/JWT

OWASP/SANS fundamentals

CI/CD security

Education

Bachelor's in CS or Engineering

Tools

SAST

DAST

SCA

Container scanning

Job description

Our client is hiring a Software Security Architect to leadtheir internal security consulting team, with a sharp focus on their mobile appecosystem (native and hybrid, iOS/Android) alongside the broader enterprise.

What You'll Do

• Lead threat-driven architecture reviews - mobileclients/SDKs, identity flows (OAuth2, JWT), AI deployments (MCP, RAG, agent harnesses)
• Advance AI-enabled threat modelling; pilot new initiatives
• Drive architecture decisions across business units, mobilepipelines included
• Build security-by-design into mobile app development
• Uplift CI/CD security tooling (mobile SAST/DAST, secretsmanagement)
• Relaunch Security Champions into a programme people wantto join
• Design identity governance across hybrid/multi-cloud,incl. on-device token handling
• Architect frameworks for Gen AI deployment, monitoring,governance
• Own security blueprints for Gen AI, MCP, AI guardrails
• Lead agentic AI security - auth/authz of AI agents

What You Bring

• Bachelor's in CS, Engineering, or equivalent
• 5+ yrs as a software engineer/developer; mobile dev/security a plus
• 3+ yrs leading a team in security architecture/consulting
• Threat modelling experience, ideally mobile (OWASPMASVS/MSTG)
• Track record delivering complex, multi-stakeholderinitiatives
Hands-on AI/ML security: LLMs, MCP, agentic AI
• Strong OWASP/SANS fundamentals; SAST, DAST, SCA, containerscanning
• Certifications (SANS, AWS, Azure) a plus

We thank you for your interest and will contact shortlisted candidates for a more detailed discussion.

EA License No. 25C2923

EA Registration No. R1105304