Lead Information Security Specialist
ThoughtWorksabout 3 hours ago
Responsibilities
- Implement and refine security automation, security-by-design, and shift-left practices across engineering squads.
- Integrate SAST and DAST into CI/CD pipelines throughout the software delivery lifecycle.
- Build security strategies tailored to delivery methodologies and client contexts.
- Conduct manual and automated security code reviews and penetration testing.
- Apply security architecture principles to identify and remediate vulnerabilities with delivery teams.
- Advise delivery teams and clients on security best practices, Singapore public sector compliance, regulatory expectations, and risk mitigation.
- Collaborate with delivery, DevOps, and Cloud teams to reduce risks in code, system architecture, and infrastructure.
Requirements
- At least 7 years of experience as a security engineer working with delivery teams to identify vulnerabilities in code and systems architecture.
- Experience implementing security automation and familiarity with agile development methodologies.
- Expertise in security architecture, manual and automated code reviews, OWASP/SANS standards, and penetration testing.
- Experience with SAST, DAST, dependency checking, and container vulnerability assessment tools such as Checkmarx, Burp, ZAP, Fortify, and Trivy.
- Basic understanding of firewall, virtualization, container, networking, and operating-system security.
- Knowledge of cloud security best practices and cloud providers including AWS, Azure, and GCP.
- Knowledge of password and secret management tools and techniques, DevSecOps, and security automation.
- Experience developing security testing plans and integrating them into the software development lifecycle.
- Strong communication, interpersonal, consulting, relationship-management, and decision-making skills.
- Must be a Singapore Citizen due to project requirements and client security clearance.
Benefits
- Career development supported through interactive tools, development programs, and a cultivation-oriented team culture.
Tech Stack
Categories
About ThoughtWorks
We are a global technology consultancy that delivers extraordinary impact by blending design, engineering and AI expertise. For 30 years, our commitment to design-led thinking, engineering excellence and innovation means we prioritize people, build teams with strong technical foundations and embed AI into every step of the process – not just as a tool but as a mindset. It’s this approach that sets us apart, sparks bold ideas and empowers us to drive real, lasting innovation. We’re not preparing for the future – we’re defining it.