Senior Software Security Architect for AI & Identity

Singapore Airlines; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

SingaporeAirlines is seeking a Software Security Architect to lead the internal security consulting team and design security solutions that enable business outcomes while maintaining robust security postures.

You will work with CISO to drive secure-by-design practices, identity governance for hybrid/multi-cloud environments, and Gen AI security initiatives, including authentication of AI agents and MCP-based contexts.

Qualifications

• Bachelor’s degree in computer science, engineering, or related fields.
• 5+ years of software engineering experience.
• 3+ years in team or lateral leadership in architecture/security.
• Experience in application security architecture/threat modelling.
• Led multi-stakeholder security initiatives.
• Experience with AI/ML security challenges (LLM, MCP, Agentic AI).
• Knowledge of OWASP/SANS security principles.
• Experience with modern tooling: SAST, DAST, SCA, container scanning, secrets mgmt.
• Certifications (SANS, AWS, Azure) preferred.

Responsibilities

• Lead security architecture consultants for threat-driven reviews and threat modelling.
• Oversee architecture reviews including OAuth2, JWT, and AI deployments.
• Drive secure-by-design in development workflows and CI/CD tooling.
• Advance identity governance for hybrid/multi-cloud environments.
• Lead Gen AI security initiatives, authentication and authorization of AI agents.

Skills

Threat modelling

Security architecture

Leadership

AI/ML security concepts

Education

Bachelor’s degree in computer science or related field

Engineering background

Tools

SAST

DAST

SCA

Container scanning

Secrets management

Job description

SingaporeAirlines is seeking a Software Security Architect to lead the internal security consulting team and design security solutions that enable business outcomes while maintaining robust security postures.

You will work with CISO to drive secure-by-design practices, identity governance for hybrid/multi-cloud environments, and Gen AI security initiatives, including authentication of AI agents and MCP-based contexts.