Security Domain Lead — Cloud & Platform Security

Tech; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

GovTech Singapore leads public sector digital transformation, building secure cloud platforms for a Smart Nation. This role owns security outcomes across GCC, shaping how security works across multiple engineering teams and cloud environments.

You will design threat modelling methodologies, define incident playbooks, and drive tooling strategy while enabling teams to self-certify against clear criteria. You’ll mentor Champions, evolve standards, and partner with stakeholders to reduce ceremony

Qualifications

• Design security frameworks and drive secure engineering practices.
• Translate external signals into actionable internal actions.
• Develop scalable security standards and runbooks.
• Collaborate with multiple teams to enable security without bottlenecks.

Responsibilities

• Own the organisation's security posture across all product teams and cloud environments.
• Architect security frameworks that integrate into engineering workflows without bottlenecks.
• Design threat modelling methodologies for multi-cloud, multi-tenant context.
• Define escalation paths, severity frameworks, and incident response playbooks.
• Own the relationship with GCSOC, shaping how external security signals translate into internal action.
• Drive security tooling strategy — selecting, configuring, and setting alert thresholds that distinguish signal from noise.
• Define security standards, runbooks, and compliance approaches that teams can self-serve against.
• Design the Security Champions model: training curriculum, forum cadence, escalation criteria.
• Replace gatekeeping with enablement — move from security reviews to self-certification with spot-checks.
• Own security decision records: auditable, documented and transferable.
• Reform compliance processes to reduce ceremony while maintaining assurance.

Skills

Security architecture

Influence without authority

Cloud security

CI/CD security

Python scripting

Threat modelling

Automation tooling

Tools

Wiz

AWS Security Hub

Azure Defender

GCP Security Command Center

Nessus

Trivy

Elastic SIEM

GuardDuty

Sentinel

CloudTrail

Terraform

GitLab CI/CD

OPA

Job description

GovTech Singapore leads public sector digital transformation, building secure cloud platforms for a Smart Nation. This role owns security outcomes across GCC, shaping how security works across multiple engineering teams and cloud environments.

You will design threat modelling methodologies, define incident playbooks, and drive tooling strategy while enabling teams to self-certify against clear criteria. You’ll mentor Champions, evolve standards, and partner with stakeholders to reduce ceremony