Principal Software Engineer (Cybersecurity)
Summary
Lead the security architecture for a large-scale enterprise platform transformation, designing secure-by-design solutions, embedding security into CI/CD pipelines, and mentoring engineering teams on secure coding practices.
About the Role
We are seeking a Lead/Principal Software Engineer (Cybersecurity) to lead the security architecture for a large-scale enterprise platform transformation. This is a hands-on engineering role focused on building secure, resilient systems by design, working closely with engineering teams to embed security throughout the software development lifecycle.
Key Responsibilities
- Define and drive the platform's security architecture, including identity, encryption, network security, and Zero Trust principles.
- Design and implement secure-by-design solutions across cloud-native and distributed systems.
- Develop threat models and security controls that influence architecture and engineering decisions.
- Build security into CI/CD pipelines through automation, policy-as-code, and DevSecOps practices.
- Design resilient systems with strong recovery, fault isolation, and business continuity capabilities.
- Mentor engineering teams on secure coding practices and security engineering best practices.
- Partner with architects, product, and engineering teams to deliver scalable and secure platform solutions.
Requirements
- Minimum 10+ years of software engineering experience with a strong focus on cybersecurity.
- Hands-on experience designing and implementing security architecture for large-scale enterprise platforms.
- Strong understanding of cloud security, identity and access management, encryption, network security, and secure SDLC.
- Experience with threat modelling, DevSecOps, policy-as-code, and security automation.
- Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, OWASP, or MITRE ATT&CK.
- Proficiency in at least one programming or scripting language (e.g. Python, Java, Kotlin, Go, TypeScript, or Bash).
- Excellent stakeholder management and technical leadership skills.
Nice to Have
- Experience modernising legacy enterprise systems.
- Knowledge of microservices, Kubernetes, event-driven architectures, and cloud-native security.
- Security certifications such as CISSP, CCSP, CISSP-ISSAP, or SABSA.
For more information you can contact Norean Tan at norean.tan@sanderson-ikas.sg
We regret to inform you that only shortlisted candidates will be notified / contacted.
EA Registration No.: R1434118 - Tan Lee Ying, Norean
iKas International (Asia) Pte Ltd
ROC No.: 200914065E | EA License No.: 16S8086