Principal Technologist - Application Security Architect

About the role

Singapore Airlines is looking for a Software Security Architect with a strong development and solution background to lead its internal security consulting team and design security solutions that deliver business outcomes while keeping a robust security posture. The role reports to the CISO.

Key responsibilities

• Lead a team of security architecture consultants through threat-driven architecture reviews and threat modelling, covering identity flows such as OAuth2, JWT and AI deployments (MCP, RAG, agent harness, context engineering)
• Improve existing AI-enabled threat modelling and pilot new AI initiatives supporting cybersecurity
• Drive security architecture decisions across business units and technology domains, embed security-by-design in development workflows and enhance CI/CD security tooling and automation
• Reignite the Security Champions initiative to strengthen the shift-left approach
• Design identity governance solutions for hybrid and multi-cloud environments and develop identity integration strategies for AI systems and automated decisioning
• Work with platform and DevOps teams to build secure infrastructure foundations and foster stakeholder buy-in
• Design security frameworks for Gen AI deployment, monitoring and governance, maintain security blueprints for AI deployments and lead the agentic AI security initiative, focusing on authentication and authorization of AI agents

Required profile

• Bachelor's degree in computer science, engineering or a related field
• More than 5 years of experience as a software engineer or developer
• 3+ years of team or lateral leadership in technology architecture or security consulting teams
• Experience leading complex, multi-stakeholder security initiatives

Required skills

• Application security architecture and threat modelling
• AI/ML security, including LLMs, Model Context Protocol (MCP) and agentic AI
• Knowledge of OWASP, SANS and other application security principles
• Modern security tooling: SAST, DAST, SCA, container scanning, secrets management
• Relevant certifications (e.g., SANS, AWS, Azure)