{"id":4016936,"url":"https://alion.io/job/singapore-airlines-lead-systems-engineer-application-security-architect","title":"Lead Systems Engineer (Application Security Architect)","company":{"id":450563,"name":"Singapore Airlines","domain":"singaporeair.com","url":"https://alion.io/company/singaporeair-4","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":24,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Function Calling","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP","optional":false},{"name":"RAG","optional":false}],"status":"live","first_seen_at":"2026-11-10T13:12:56Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-12T22:21:58Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Job Description\nThe successful candidate will be a part of the Information Technology Division.\nKey Responsibilities\nApplication Security Reviews and Threat Modelling\nLead security architecture reviews and threat modelling for assigned applications, platforms and technology initiatives, translating threats into practical design recommendations.\nAssess authentication and authorization flows, including OAuth 2.0, OpenID Connect and JWT-based implementations.\nReview AI deployment architectures, including retrieval-augmented generation (RAG), Model Context Protocol (MCP) integrations and agent workflows, working with specialists where required.\nHelp improve existing AI-enabled threat modelling capabilities and contribute to pilots that support cybersecurity delivery.\nProvide technical guidance and mentoring to security consultants and engineering teams.\nEmbed security-by-design practices into development workflows through reusable guidance, design patterns and early engagement with delivery teams.\nSupport adoption of security tooling and report meaningful measures of coverage, remediation and developer engagement.\nHelp revitalise the Security Champions programme through practical training, knowledge sharing and support.\nContribute to security architecture standards and decisions across relevant business and technology domains.\nEnterprise and Identity Security Architecture\nDesign and review identity integration patterns for hybrid and multi-cloud environments, covering human users, workloads and service identities.\nContribute to identity governance initiatives, including access lifecycle management, least privilege and access reviews.\nSupport identity integration for AI systems and automated workflows, including credential handling, delegated access and authorization boundaries.\nWork with platform and DevOps engineering teams to establish secure infrastructure patterns and reusable technology foundations.\nBuild trusted relationships with stakeholders, explaining security trade-offs and helping teams implement proportionate controls.\nAgentic and Generative AI Security\nContribute to security blueprints and guardrails for generative AI deployments within the organisation’s AI risk framework.\nAssess risks in AI applications, including prompt injection, sensitive data exposure, excessive permissions and unsafe tool use.\nHelp design and implement authentication and authorization controls for AI agents and MCP integrations.\nPartner with AI, engineering and risk teams to implement appropriate monitoring, logging and security controls throughout the AI application lifecycle.\n Requirements\nBachelor’s degree in computer science, engineering or a related field, or equivalent practical experience.\n5+ years of relevant experience across software engineering, solution architecture or application security.\nPractical experience in application security architecture reviews and threat modelling, with the ability to translate findings into implementable engineering changes.\nExperience delivering security or architecture improvements involving multiple stakeholders.\nStrong understanding of application security principles, including OWASP guidance, secure coding, API security and authentication and authorization.\nExperience integrating or using security tooling within development workflows, including SAST, DAST, software composition analysis, container scanning and secrets management.\nWorking knowledge of cloud security and identity patterns in AWS, Azure or comparable environments.\nPractical exposure to securing AI-enabled applications, with familiarity in areas such as LLMs, RAG, MCP or agentic AI. Deep expertise across all these areas is not required.\nStrong communication skills and the ability to explain security risks, discuss trade-offs and work constructively with technical and business stakeholders.\nExperience in the following areas would be beneficial:Experience supporting a Security Champions programme.\nExperience implementing reusable security patterns, developer guidance or security automation.\nExposure to identity governance, workload identity or authorization for AI agents.\nRelevant certifications, such as GIAC/SANS, AWS or Azure security certifications.","description_format":"text","description_chars":4219,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Air Transport","Motorsports"],"lifecycle":[{"event":"open","at":"2026-11-10T13:12:56Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":24,"reasons":["conf:2","win:early"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/singapore-airlines-lead-systems-engineer-application-security-architect","json_url":"https://alion.io/job/singapore-airlines-lead-systems-engineer-application-security-architect.json","meta":{"generated_at":"2026-11-13T01:40:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3598,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":450563},"rest":"https://alion.io/mcp/rest/get_company?id=450563"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsingapore-airlines-lead-systems-engineer-application-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsingapore-airlines-lead-systems-engineer-application-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsingapore-airlines-lead-systems-engineer-application-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/singapore-airlines-lead-systems-engineer-application-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsingapore-airlines-lead-systems-engineer-application-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4016936}},{"tool":"search_jobs","arguments":{"company":"singaporeair.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4016936},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}