Senior Application Security Architect & DevSecOps Lead

Dyson; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Dyson is seeking a Principal Cyber Security Architect for Application Security to lead security across Dyson's digital application landscape, including eCommerce, mobile apps and APIs. You will define reusable security architectures, embed security into the SDLC and establish a scalable DevSecOps capability with strong governance.

You will collaborate with engineering and product teams to deliver secure, measurable outcomes and guide security testing, risk assessments and threat modelling across

Qualifications

• Extensive experience in application security and security architecture.
• Strong knowledge of secure SDLC for web, mobile, API and cloud-native services.
• Hands-on experience with SAST, DAST and security test automation.
• Threat modelling and risk assessment skills for complex landscapes.
• Ability to influence across senior stakeholders and engineering teams.

Responsibilities

• Set the application security and DevSecOps architecture direction.
• Provide authoritative security advice across web, mobile, API, microservices, serverless and cloud-native.
• Lead security architecture reviews and risk assessments from discovery through operation.
• Facilitate threat modelling and translate threats into engineering requirements.
• Define the DevSecOps control framework and reference pipeline.
• Guide security testing capabilities and vulnerability remediation.
• Strengthen software supply-chain security and SBOM governance.
• Partner with engineering enablement to create secure-by-default patterns.
• Develop security metrics and governance for ongoing improvement.
• Act as a trusted partner to Cyber Security, Digital, Engineering and Technology stakeholders.

Skills

Application security

Security architecture

DevSecOps

Threat modelling

OWASP Top 10

SAST/DAST

Cloud security

Kubernetes

API security

Test automation

Education

ISC2 CSSLP

CISSP

GIAC Secure Software

Tools

SAST tools

DAST tools

SBOM tooling

IaC scanning

Container security tools

Job description

Dyson is seeking a Principal Cyber Security Architect for Application Security to lead security across Dyson's digital application landscape, including eCommerce, mobile apps and APIs. You will define reusable security architectures, embed security into the SDLC and establish a scalable DevSecOps capability with strong governance.

You will collaborate with engineering and product teams to deliver secure, measurable outcomes and guide security testing, risk assessments and threat modelling across