Security Engineer

ENCOUNTERS PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Pelago, part of the Singapore Airlines Group, seeks a Security Engineer to build a proactive security program spanning infrastructure, applications and internal environments.

You will work with engineering and leadership on SIEM, vulnerability management, SAST/DAST, cloud security (AWS), and secure software development practices.

Qualifications

• 5+ years in cybersecurity or security engineering, cloud-native preferred.
• Solid networking, auth, encryption, and access-control knowledge.
• Ability to build programs from scratch with minimal direction.
• Strong written and verbal security documentation and collaboration.
• Knowledge of secure SDLC and OWASP principles.
• Hands-on SIEM expertise (Splunk, CrowdStrike, Datadog, Sentinel).
• Experience developing and operationalising security policies.
• Experience running vulnerability management programs.
• SOC monitoring and incident response workflows.
• Implementing SAST/DAST tools (Snyk, Veracode, Checkmarx, Burp Suite).
• Securing AWS cloud infrastructure with native/third-party tools.

Responsibilities

• Build and maintain a proactive security program across infra, apps, and internal environments.
• Collaborate with engineering and leadership on secure by design practices.

Skills

Cybersecurity

Security Engineering

Cloud-native

Networking

Authentication

Encryption

Access Control

Programming

Communication

OWASP

SAST/DAST

Vulnerability Management

SOC

Incident Response

AWS Security

Tools

Splunk

CrowdStrike

Datadog

Sentinel

Snyk

Veracode

Checkmarx

Burp Suite

AWS Security Tools

Job description

WHO ARE WE?

At Pelago, we’re reimagining how travelers explore the world, delivering curated rewarding experiences backed by the quality and trust of the Singapore Airlines Group. As a key part of the SIA ecosystem, we offer exclusive value, deals, and seamless KrisFlyer integration for travelers across Singapore Airlines, Scoot, and beyond. We are a fast-growing, high-ownership team looking for builders to scale our next phase of growth.

WHAT WILL YOU BE DOING?

As our Security Engineer, you will be responsible for building a robust, scalable, and proactive security program. You will work closely with engineering, operations, and leadership to secure our infrastructure, applications, and internal environments.

We’re seeking someone with strong hands-on expertise in SIEM, Security Policy development, Vulnerability Management, Security Operations (SOC), SAST/DAST testing, and Cloud Security.

Requirements

WHAT EXPERTISE ARE MUST HAVES FOR THIS ROLE?

• 5+ years of experience in cybersecurity, security engineering, or related roles, preferably in a cloud-native environment.
• Solid understanding of networking, authentication, encryption, and access control principles.
• Comfortable building programs from scratch with minimal direction.
• Strong written and verbal communication skills — especially in documenting security practices and working with engineering teams.
• Knowledge of secure software development practices and OWASP principles
• Good technical expertise in: SIEM solutions (e.g., Splunk, Crowdstrike, Datadog, Sentinel)
• Developing and operationalising security policies and standards.
• Running vulnerability management programs.
• SOC monitoring and incident response workflows.
• Implementing and integrating SAST/DAST tools (e.g., Snyk, Veracode, Checkmarx, Burp Suite).
• Securing cloud infrastructure (AWS) using native and third-party security tools.

WHAT EXPERTISE ARE GOOD TO HAVE FOR THIS ROLE?

• Security certifications (e.g., CISSP, OSCP, AWS Certified Security Specialty).
• Experience with DevSecOps practices and securing containerized applications.
• Previous experience scaling security programs in a startup or hypergrowth environment.
• Familiarity with regulatory frameworks like SOC 2 or ISO 27001