Security Engineer

Pelago by Singapore Airlines; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Pelago by Singapore Airlines is seeking a Security Engineer to build and run a proactive security program for our infrastructure, apps, and internal environments. You will work closely with engineering, operations, and leadership to protect systems and data.

The role emphasizes hands-on work with SIEM, vulnerability management, SOC, and SAST/DAST tools in a cloud-native setup, primarily AWS, with strong collaboration across teams.

Qualifications

• 5+ years of cybersecurity/security engineering experience.

Responsibilities

• Build a robust, scalable security program for infra, apps, and internal environments.
• Collaborate with engineering, operations and leadership on security programs.
• Implement SIEM, vulnerability management, SOC processes and incident response workflows.
• Develop and operationalise security policies and standards.
• Integrate SAST/DAST tools into CI/CD pipelines.
• Secure AWS cloud infrastructure with native/third-party tools.

Skills

5+ years exp

Cloud security

Security policy

SOC monitoring

Vulnerability mgmt

SAST/DAST tools

OWASP

SIEM

AWS security

Networking basics

Tools

Splunk

CrowdStrike

Datadog

Microsoft Sentinel

Snyk

Veracode

Checkmarx

Burp Suite

Job description

At Pelago, we're reimagining how travelers explore the world, delivering curated, rewarding experiences backed by the quality and trust of the Singapore Airlines Group. As a key part of the SIA ecosystem, we offer exclusive value, deals, and seamless KrisFlyer integration for travelers across Singapore Airlines, Scoot, and beyond. We are a fast-growing, high-ownership team looking for builders to scale our next phase of growth.

WHAT WILL YOU BE DOING?

As our Security Engineer, you will be responsible for building a robust, scalable, and proactive security program. You will work closely with engineering, operations, and leadership to secure our infrastructure, applications, and internal environments.

We're seeking someone with strong hands-on expertise in SIEM, Security Policy development, Vulnerability Management, Security Operations (SOC), SAST/DAST testing, and Cloud Security.

WHAT EXPERTISE ARE MUST HAVES FOR THIS ROLE?

• 5+ years of experience in cybersecurity, security engineering, or related roles, preferably in a cloud-native environment.
• Solid understanding of networking, authentication, encryption, and access control principles.
• Comfortable building programs from scratch with minimal direction.
• Strong written and verbal communication skills - especially in documenting security practices and working with engineering teams.
• Knowledge of secure software development practices and OWASP principles
• Good technical expertise in: SIEM solutions (e.g., Splunk, Crowdstrike, Datadog, Sentinel)
• Developing and operationalising security policies and standards.
• Running vulnerability management programs.
• SOC monitoring and incident response workflows.
• Implementing and integrating SAST/DAST tools (e.g., Snyk, Veracode, Checkmarx, Burp Suite).
• Securing cloud infrastructure (AWS) using native and third-party security tools.

WHAT EXPERTISE ARE GOOD TO HAVE FOR THIS ROLE?

• Security certifications (e.g., CISSP, OSCP, AWS Certified Security Specialty).
• Experience with DevSecOps practices and securing containerized applications.
• Previous experience scaling security programs in a startup or hypergrowth environment.
• Familiarity with regulatory frameworks like SOC 2 or ISO 27001