Cybersecurity Engineer

WHO ARE WE?

At Pelago, we’re reimagining how travelers explore the world, delivering curated rewarding experiences backed by the quality and trust of the Singapore Airlines Group. As a key part of the SIA ecosystem, we offer exclusive value, deals, and seamless KrisFlyer integration for travelers across Singapore Airlines, Scoot, and beyond. We are a fast-growing, high-ownership team looking for builders to scale our next phase of growth.

WHAT WILL YOU BE DOING?

As our Cybersecurity Engineer, you will be responsible for building a robust, scalable, and proactive security program. You will work closely with engineering, operations, and leadership to secure our infrastructure, applications, and internal environments.

We’re seeking someone with strong hands-on expertise in SIEM, Security Policy development, Vulnerability Management, Security Operations (SOC), SAST/DAST testing, and Cloud Security.

Requirements

WHAT EXPERTISE ARE MUST HAVES FOR THIS ROLE?

• 5+ years of experience in cybersecurity, security engineering, or related roles, preferably in a cloud-native environment.
• Solid understanding of networking, authentication, encryption, and access control principles.
• Comfortable building programs from scratch with minimal direction.
• Strong written and verbal communication skills — especially in documenting security practices and working with engineering teams.
• Knowledge of secure software development practices and OWASP principles
• Good technical expertise in: SIEM solutions (e.g., Splunk, Crowdstrike, Datadog, Sentinel)
• Developing and operationalising security policies and standards.
• Running vulnerability management programs.
• SOC monitoring and incident response workflows.
• Implementing and integrating SAST/DAST tools (e.g., Snyk, Veracode, Checkmarx, Burp Suite).
• Securing cloud infrastructure (AWS) using native and third-party security tools.

WHAT EXPERTISE ARE GOOD TO HAVE FOR THIS ROLE?

• Security certifications (e.g., CISSP, OSCP, AWS Certified Security Specialty).
• Experience with DevSecOps practices and securing containerized applications.
• Previous experience scaling security programs in a startup or hypergrowth environment.
• Familiarity with regulatory frameworks like SOC 2 or ISO 27001

Ready to apply? Submit your resume below, and our talent team will be in touch!

Skills

Program Development, Role Modelling, Technology Expertise, Datadog, Sentinel, Secure Software Development Lifecycle (SSDLC), Security Programme Management, Cybersecurity, Authentication, Good Written Communication Skills, Encryption, System Security Policies, DevSecOps, Regulatory Frameworks, CISSP, Threat and Vulnerability Management