Lead Information Security Specialist
ThoughtWorks2 months ago
Singapore, SingaporeStaff+
Responsibilities
- Implement and refine security automation, security-by-design, and shift-left practices across engineering squads.
- Integrate SAST and DAST into CI/CD pipelines throughout the software delivery lifecycle.
- Define security strategies tailored to delivery methodologies and client contexts.
- Conduct manual and automated security code reviews and penetration testing.
- Apply security architecture principles to identify and remediate vulnerabilities with delivery teams.
- Advise delivery teams and clients on security practices, Singapore public-sector compliance, regulatory expectations, and risk mitigation.
- Collaborate with delivery, DevOps, and Cloud teams to reduce risks in code, architecture, and infrastructure.
Requirements
- At least 7 years of security engineering experience involving vulnerability identification in code and systems architecture.
- Experience implementing security automation and familiarity with agile development methodologies.
- Expertise in security architecture, manual and automated code reviews, OWASP/SANS standards, and penetration testing.
- Experience with SAST, DAST, dependency checking, and container vulnerability assessment tools such as Checkmarx, Burp, ZAP, Fortify, and Trivy.
- Knowledge of firewall, virtualization, container, networking, operating-system, cloud, and password/secret-management security.
- Knowledge of AWS, Azure, and GCP cloud security best practices.
- Understanding of DevSecOps and security automation.
- Experience developing security testing plans and integrating them into the software development lifecycle.
- Strong consulting, communication, interpersonal, relationship-management, and decision-making skills.
- Must be a Singapore Citizen due to client security-clearance requirements.
Benefits
- Interactive career-development tools and development programs.
- Support from teammates and a cultivation-focused company culture.
- Role requires Singapore citizenship due to client security-clearance requirements.
Tech Stack
Categories
About ThoughtWorks
Thoughtworks is a global technology consultancy that designs and builds custom software, data platforms, and cloud-native systems for enterprises across industries. Its services-based model spans product discovery, agile delivery, platform modernization, and advisory on digital transformation and AI. Founded in 1993 and headquartered in Chicago, it listed on Nasdaq in 2021 (TWKS) and remains backed by private-equity firm Apax Partners.