Lead Information Security Specialist

Overview

Lead Information Security Specialist focused on security-by-design across the software delivery lifecycle, partnering with engineering squads to identify and remediate vulnerabilities.

What you'll do

• Implement and refine security automation processes in CI/CD via SAST/DAST integration.
• Embed security-by-design and shift-left practices across engineering squads.
• Conduct manual and automated security code reviews and perform penetration testing.
• Apply security architecture principles to identify and remediate vulnerabilities.
• Advise delivery teams and clients on security best practices and risk mitigation.
• Work with delivery, DevOps, and Cloud teams to reduce risks in code, architecture, and infrastructure.

What you'll need

• 7+ years of experience as a security engineer working with delivery teams to identify vulnerabilities.
• Proven experience implementing security automation and familiarity with agile methodologies.
• Expertise in security architecture principles and manual/automated code reviews.
• Knowledge of OWASP/SANS standards and penetration testing techniques.
• Experience with SAST, DAST, dependency checking, and container vulnerability assessment tools.
• Basic understanding of firewall, virtualization, container, networking, and OS security.

Details

• Requires the successful candidate to be a Singapore Citizen due to client security clearance.