Senior InfoSec Architect & DevSecOps Leader

Thoughtworks; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Thoughtworks in Singapore seeks Lead Engineers who will act as trusted security leaders, guiding delivery teams to embed security across the SDLC, platform architecture, and cloud environments.

You will balance high-level security architecture with hands-on engineering, mentoring cross-functional teams and aligning security with client business goals. Singapore Citizen status is required for projects with specific client clearance.

Qualifications

• 7+ years of experience in information security engineering, application security, or cloud security.
• Deep expertise in secure software development practices and threat modeling (e.g., STRIDE, PASTA).
• Hands-on experience with security automation tools (SAST, DAST, IAST, SCA, secrets scanners) integrated into CI/CD pipelines.
• Strong capabilities in securing cloud infrastructure (AWS, Azure, GCP), container platforms (Kubernetes, Docker), and IaC.
• Solid foundation in cryptography, IAM, zero-trust, network security, and API security.
• Knowledge of regulatory frameworks such as Singapore IM8/IM8+, SOC 2, ISO 27001, PCI-DSS, GDPR.
• Natural mentor and technical leader, capable of guiding cross-functional teams and communicating security risks to leadership.

Responsibilities

• Lead the design and implementation of enterprise security architectures, zero-trust patterns, and DevSecOps practices across software delivery teams.
• Act as a primary technical advisor to client stakeholders and engineering leads, aligning information security with enterprise risk tolerances and business goals.
• Champion shift-left security by integrating automated SAST, DAST, SCA, and secrets management into CI/CD pipelines.
• Conduct threat modeling sessions, security risk assessments, and architectural reviews with delivery teams.
• Oversee cloud platform security governance, IAM, container security (Kubernetes, Docker), and IaC compliance across AWS, Azure, or GCP.
• Guide vulnerability management, security incident response workflows, and audit readiness per standards (Singapore IM8/IM8+, SOC 2, ISO 27001, NIST).
• Partner with cross-functional teams to balance security controls with delivery velocity.
• Mentor engineers, foster an inclusive culture, and contribute to Thoughtworks’ security community of practice.

Skills

Information security

Application security

Cloud security

Threat modeling

SAST/DAST/IAST

CI/CD security

IAM

Zero-trust

Kubernetes

Docker

Tools

SAST tools

DAST tools

IAST tools

SCA tools

Secrets scanners

CI/CD pipelines

Kubernetes

Docker

Job description

Thoughtworks in Singapore seeks Lead Engineers who will act as trusted security leaders, guiding delivery teams to embed security across the SDLC, platform architecture, and cloud environments.

You will balance high-level security architecture with hands-on engineering, mentoring cross-functional teams and aligning security with client business goals. Singapore Citizen status is required for projects with specific client clearance.