Senior Security Architect - Critical Infra

FPT Asia Pacific; Singapore; On-site; SGD 150,000 - 230,000; Full time

Job summary

FPT Asia Pacific is seeking a senior cybersecurity architect to own and evolve the security architecture for Singapore's TradeNet CII. You will work hands-on with engineering teams to implement controls and improve secure coding practices, while maintaining robust threat models and ensuring high availability and disaster recovery.

The role requires deep experience in regulated, critical platforms, strong scripting abilities (Python/TypeScript), and familiarity with CSA CCoP v2 and WOG IM8

Qualifications

• 10+ years of cybersecurity experience in software engineering, security engineering, or security architecture.
• Hands-on designer of secure systems, capable of reviewing/writing code and coaching teams in secure development.
• Experience designing security architecture for regulated, critical, large-scale platforms.
• Knowledge of CSA CCoP v2 and WOG IM8 frameworks.

Responsibilities

• Own and evolve security architecture for the TradeNet Critical Information Infrastructure (CII).
• Embed secure-by-design controls across architecture and development lifecycles.
• Collaborate with engineering teams to implement security controls and improve secure coding practices.
• Maintain threat models using frameworks like MITRE ATT&CK (supply-chain, APTs, nation-state).
• Design for high availability, disaster recovery, and containment to ensure national trade continuity.

Skills

Cybersecurity architecture

Hands-on security

Threat modelling

MITRE ATT&CK

NIST / ISO / CIS

Scripting (Python)

Scripting (TypeScript)

Kotlin/JVM

DevSecOps / CI-CD security

Security automation

Tools

Python

TypeScript

Job description

FPT Asia Pacific is seeking a senior cybersecurity architect to own and evolve the security architecture for Singapore's TradeNet CII. You will work hands-on with engineering teams to implement controls and improve secure coding practices, while maintaining robust threat models and ensuring high availability and disaster recovery.

The role requires deep experience in regulated, critical platforms, strong scripting abilities (Python/TypeScript), and familiarity with CSA CCoP v2 and WOG IM8