Principal AppSec Architect & DevSecOps Leader

Dyson Operations Pte Ltd; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

Dyson is seeking a Principal Cybersecurity Architect for Application Security and DevSecOps to lead security across Dyson's digital application landscape, including eCommerce, customer and ownership experiences, mobile apps, APIs and cloud-native services.

You will define reusable security architectures, patterns and guardrails, and help establish a scalable DevSecOps capability that embeds proportionate security controls throughout the software development lifecycle.

Qualifications

• Extensive experience in application security and secure software engineering.
• Strong knowledge of SDLC across web, mobile, API and cloud-native services.
• Practical DevSecOps experience and CI/CD integration.
• Deep understanding of OWASP Top 10 and API Security Top 10.
• Hands-on with SAST, DAST, and software composition analysis.
• Threat modelling and risk assessment skills.

Responsibilities

• Set architecture direction for application security and DevSecOps.
• Provide security advice across web, mobile, API, and cloud-native systems.
• Lead architecture reviews and risk assessments with traceable decisions.
• Facilitate threat modelling using STRIDE and data-flow analysis.
• Design reusable security patterns for identity, APIs, secrets and encryption.
• Define the DevSecOps framework and policy-as-code.
• Guide security testing capabilities integration (SAST, DAST, SCA).
• Strengthen software supply-chain security and SBOM governance.
• Partner with engineering teams to create secure-by-default templates.
• Develop security metrics and governance across the lifecycle.

Skills

Application security

Security architecture

DevSecOps

Threat modelling

OWASP Top 10

Cloud security

CI/CD security

APIs & microservices security

Code review

Programming: Python/Java/JS

Tools

SAST

DAST

SBOMs

IaC scanning

Container security

Vulnerability management

Job description

Dyson is seeking a Principal Cybersecurity Architect for Application Security and DevSecOps to lead security across Dyson's digital application landscape, including eCommerce, customer and ownership experiences, mobile apps, APIs and cloud-native services.

You will define reusable security architectures, patterns and guardrails, and help establish a scalable DevSecOps capability that embeds proportionate security controls throughout the software development lifecycle.