Principal Software Engineer (Cybersecurity)

About the Role We are seeking a Principal / Lead Software Engineer (Cybersecurity) to lead the security architecture for a large-scale enterprise platform transformation. This is a hands-on engineering role focused on building secure, resilient systems by design, working closely with engineering teams to embed security throughout the software development lifecycle. Key Responsibilities

• Define and drive the platform's security architecture, including identity, encryption, network security, and Zero Trust principles.

• Design and implement secure-by-design solutions across cloud-native and distributed systems.

• Develop threat models and security controls that influence architecture and engineering decisions.

• Build security into CI/CD pipelines through automation, policy-as-code, and DevSecOps practices.

• Design resilient systems with strong recovery, fault isolation, and business continuity capabilities.

• Mentor engineering teams on secure coding practices and security engineering best practices.

• Partner with architects, product, and engineering teams to deliver scalable and secure platform solutions.

Requirements

• Minimum 10+ years of software engineering experience with a strong focus on cybersecurity.

• Hands-on experience designing and implementing security architecture for large-scale enterprise platforms.

• Strong understanding of cloud security, identity and access management, encryption, network security, and secure SDLC.

• Experience with threat modelling, DevSecOps, policy-as-code, and security automation.

• Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, OWASP, or MITRE ATT&CK.

• Proficiency in at least one programming or scripting language (e.g. Python, Java, Kotlin, Go, TypeScript, or Bash).

• Excellent stakeholder management and technical leadership skills.

Nice to Have

• Experience modernising legacy enterprise systems.

• Knowledge of microservices, Kubernetes, event-driven architectures, and cloud-native security.

• Security certifications such as CISSP, CCSP, CISSP-ISSAP, or SABSA.

For more information you can contact Norean Tan at [email protected] We regret to inform you that only shortlisted candidates will be notified / contacted.

EA Registration No.: R1434118 - Tan Lee Ying, Norean iKas International (Asia) Pte Ltd ROC No.: 200914065E | EA License No.: 16S8086