Lead Security Engineer: Enterprise DevSecOps Architect

THOUGHTWORKS PTE. LTD.; Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

Thoughtworks Singapore is seeking a Lead Security Engineer to guide security strategy across client software deliveries, embedding security into SDLC, cloud platforms, and IaC. You will mentor peers, drive risk-informed decisions, and champion zero-trust and DevSecOps practices.

Strong communication with stakeholders is essential in a fast-paced tech consultancy. You will lead security design reviews, threat modeling sessions, and governance across AWS, Azure, or GCP while aligning with

Qualifications

• 7+ years of experience in information security engineering, application security, or cloud security.
• Deep expertise in secure software development, threat modeling (STRIDE, PASTA), and OWASP Top 10 / SANS Top 25.
• Hands-on experience with security automation tools and CI/CD integration.
• Strong capabilities in securing cloud infrastructure (AWS, Azure, GCP), containers and IaC.
• Foundation in cryptography, IAM, zero-trust, network and API security.
• Knowledge of regulatory frameworks (Singapore IM8 / IM8+, SOC 2, ISO 27001, PCI-DSS, GDPR).
• Natural mentor with strong leadership and coaching abilities.
• Excellent communication and stakeholder management; translating risk into action.
• Comfort with ambiguity and balancing security with delivery velocity.
• Open mindset toward AI and AI-assisted security governance.

Responsibilities

• Lead the design and implementation of enterprise security architectures, zero-trust patterns, and DevSecOps across software delivery teams.
• Primary technical advisor to client stakeholders, aligning security with risk tolerances and business goals.
• Champion shifting security left by integrating SAST, DAST, SCA, and secrets management into CI/CD pipelines.
• Conduct threat modeling, risk assessments, and architectural reviews to identify and mitigate vulnerabilities.
• Oversee cloud platform security governance, IAM, container security, and IaC compliance across AWS, Azure, or GCP.
• Guide vulnerability management, incident response workflows, and audit readiness for regulatory alignment.
• Partner with cross-functional teams to balance security controls with delivery velocity.
• Mentor engineers and foster an inclusive security-focused culture.
• Apply Thoughtworks technology radar insights to client security challenges.
• Contribute to Thoughtworks security community of practice and pre-sales pursuits.

Skills

Security architecture

Threat modeling

Mentoring

Communication

Cloud security

Tools

SAST tooling

DAST tooling

IAST tooling

SCA tooling

Secrets scanning

Kubernetes

Docker

IaC tooling (Terraform)

Job description

Thoughtworks Singapore is seeking a Lead Security Engineer to guide security strategy across client software deliveries, embedding security into SDLC, cloud platforms, and IaC. You will mentor peers, drive risk-informed decisions, and champion zero-trust and DevSecOps practices.

Strong communication with stakeholders is essential in a fast-paced tech consultancy. You will lead security design reviews, threat modeling sessions, and governance across AWS, Azure, or GCP while aligning with