Senior Cloud Security Architect & DevSecOps Leader

Thoughtworks Inc.; Singapore; Hybrid; SGD 180,000 - 240,000; Full time

Benefits offered by this job

Security training programs

Flexible learning & growth

Collaborative culture

Job summary

Thoughtworks is seeking a Lead Security Engineer to guide enterprise security architecture across software delivery teams in Singapore. You will embed security into the SDLC, drive DevSecOps practices, and coach cross-functional groups to balance risk with delivery velocity.

You’ll lead threat modeling sessions, oversee IAM and container security, and ensure compliance with ISO 27001, SOC 2, PCI-DSS, in multi-cloud environments. A citizen/permanent resident of Singapore is required.

Qualifications

• 7+ years in information security engineering or cloud security in fast-paced software delivery environments.
• Expertise in threat modeling methodologies (e.g., STRIDE, PASTA) and standards (OWASP Top 10, SANS Top 25).
• Hands-on with security automation tools (SAST, DAST, IAST, SCA, secrets scanners) integrated into CI/CD pipelines.
• Security in cloud platforms (AWS, Azure, GCP), containers (Kubernetes, Docker) and IaC.
• Knowledge of regulatory frameworks (SOC 2, ISO 27001, PCI-DSS, GDPR) and risk-based governance.

Responsibilities

• Lead the design and implementation of enterprise security architectures, zero-trust patterns, and DevSecOps controls across software delivery teams.
• Act as a primary technical advisor to client stakeholders and engineering leads, aligning information security with business goals.
• Champion shifting security left by embedding automated SAST/DAST/IAST into CI/CD pipelines.
• Conduct threat modeling, security risk assessments, and architectural reviews to mitigate vulnerabilities.
• Oversee cloud platform security governance, IAM, container security, and IaC compliance across AWS/Azure/GCP.
• Guide vulnerability management, incident response, and audit readiness for regulatory alignment.
• Collaborate with cross-functional teams to balance security controls with delivery velocity and quality.
• Mentor engineers, support capability development, and contribute to Thoughtworks' security community of practice.

Skills

InfoSec engineering

Threat modeling

Secure SDLC

Cloud security

IAM & zero-trust

Regulatory compliance

Leadership / mentoring

Tools

SAST tools

DAST tools

SCA

IaC security

Kubernetes security

Job description

Thoughtworks is seeking a Lead Security Engineer to guide enterprise security architecture across software delivery teams in Singapore. You will embed security into the SDLC, drive DevSecOps practices, and coach cross-functional groups to balance risk with delivery velocity.

You’ll lead threat modeling sessions, oversee IAM and container security, and ensure compliance with ISO 27001, SOC 2, PCI-DSS, in multi-cloud environments. A citizen/permanent resident of Singapore is required.