Strategic Lead, Application Security & DevSecOps

Thoughtworks Inc.; Singapore; On-site; SGD 170,000 - 250,000; Full time

Job summary

Thoughtworks is seeking a Lead Security Engineer in Singapore to guide enterprise security strategy across software delivery, cloud environments, and platform architecture. You will balance high-level security design with hands-on engineering, embedding security into the SDLC and leading cross-functional delivery teams.

You will mentor engineers, drive security awareness, and align security initiatives with client risk tolerances, regulatory standards, and business objectives.

Qualifications

• 7+ years of information security engineering, app security, or cloud security in fast-paced software delivery.
• Deep expertise in secure software development, threat modeling (STRIDE, PASTA), and OWASP/SANS standards.
• Hands-on experience with security automation tools and integrating them into CI/CD pipelines.
• Strong capabilities securing cloud infra (AWS, Azure, GCP), containers (Kubernetes, Docker), and IaC.

Responsibilities

• Lead design and implementation of enterprise security architectures, zero-trust patterns, and DevSecOps across delivery teams.
• Act as primary technical advisor to client stakeholders and engineering leads, aligning security with risk tolerances and business goals.
• Champion shift-left security in the SDLC by embedding automated SAST/DAST/IAST/SCA and secrets management into CI/CD.
• Conduct threat modeling sessions, risk assessments, and architectural reviews to identify vulnerabilities and mitigations.
• Oversee cloud security governance, IAM, container security, and IaC compliance across AWS, Azure, or GCP.
• Guide vulnerability management, incident response workflows, and audit readiness to align with standards (e.g., IM8, SOC 2, ISO 27001).
• Mentor cross-functional teams, foster security awareness, and support thought leadership within Thoughtworks.

Skills

Information security

Threat modeling

Cloud security

Security automation

IAM & zero-trust

Leadership & mentoring

Stakeholder management

AI in security

Tools

SAST

DAST

IAST

SCA

Secrets scanners

Kubernetes

Docker

CI/CD pipelines

Job description

Thoughtworks is seeking a Lead Security Engineer in Singapore to guide enterprise security strategy across software delivery, cloud environments, and platform architecture. You will balance high-level security design with hands-on engineering, embedding security into the SDLC and leading cross-functional delivery teams.

You will mentor engineers, drive security awareness, and align security initiatives with client risk tolerances, regulatory standards, and business objectives.