Security Engineer

Pelago by Singapore Airlines; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Pelago by Singapore Airlines seeks a Security Engineer to build a robust security program, protecting our cloud-native infrastructure and applications. You will partner with engineering, operations, and leadership to implement proactive security controls and incident response.

The role requires hands-on expertise in SIEM, vulnerability management, SOC operations, security policies, and secure SDLC practices, with strong communication across teams.

Qualifications

• 5+ years in cybersecurity or security engineering.
• Cloud-native environment experience.
• Strong grounding in networking, authentication, encryption.
• Ability to document security practices with engineering teams.
• Knowledge of secure SDLC and OWASP principles.
• Hands-on with SIEM, vulnerability management, SOC workflows.

Responsibilities

• Build a robust, scalable security program for Pelago.
• Secure infrastructure, applications and internal environments.
• Collaborate with engineering, operations and leadership.
• Oversee vulnerability management and incident response workflows.

Skills

Security engineering

Cloud security

SIEM

Vulnerability management

SOC operations

OWASP

Security policy

DevSecOps

Communication

Secure SDLC

Tools

Splunk

CrowdStrike

Datadog

Sentinel

Job description

At Pelago, we’re reimagining how travelers explore the world, delivering curated, rewarding experiences backed by the quality and trust of the Singapore Airlines Group. As a key part of the SIA ecosystem, we offer exclusive value, deals, and seamless KrisFlyer integration for travelers across Singapore Airlines, Scoot, and beyond. We are a fast-growing, high-ownership team looking for builders to scale our next phase of growth.

WHAT WILL YOU BE DOING?

As our Security Engineer, you will be responsible for building a robust, scalable, and proactive security program. You will work closely with engineering, operations, and leadership to secure our infrastructure, applications, and internal environments.

We’re seeking someone with strong hands‑on expertise in SIEM, Security Policy development, Vulnerability Management, Security Operations (SOC), SAST/DAST testing, and Cloud Security.

WHAT EXPERTISE ARE MUST HAVES FOR THIS ROLE?

• 5+ years of experience in cybersecurity, security engineering, or related roles, preferably in a cloud‑native environment.
• Solid understanding of networking, authentication, encryption, and access control principles.
• Comfortable building programs from scratch with minimal direction.
• Strong written and verbal communication skills — especially in documenting security practices and working with engineering teams.
• Knowledge of secure software development practices and OWASP principles
• Good technical expertise in: SIEM solutions (e.g., Splunk, Crowdstrike, Datadog, Sentinel)
• Developing and operationalising security policies and standards.
• Running vulnerability management programs.
• SOC monitoring and incident response workflows.

WHAT EXPERTISE ARE GOOD TO HAVE FOR THIS ROLE?

• Security certifications (e.g., CISSP, OSCP, AWS Certified Security Specialty).
• Experience with DevSecOps practices and securing containerized applications.
• Previous experience scaling security programs in a startup or hypergrowth environment.
• Familiarity with regulatory frameworks like SOC 2 or ISO 27001