{"id":586737,"url":"https://alion.io/job/thoughtworks-lead-application-security-engineer-2","title":"Lead Application Security Engineer","company":{"id":6249,"name":"Thoughtworks","domain":"thoughtworks.com","url":"https://alion.io/company/thoughtworks","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":14,"ghost_share":0,"stale_share":0.429,"repost_share":0.071,"time_to_fill_p50_days":36,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":114000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":15},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-12T05:16:25Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-17T04:28:39Z","board_verified":true,"closed_at":null,"days_open":66,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":66},"description":"Lead Engineers at Thoughtworks act as trusted technical leaders and security advisors who align enterprise risk and executive strategy with modern software delivery, ensuring security measures enhance organizational objectives.\nIn this role, you bring a strategic and proactive mindset to client engagements, guiding delivery teams in embedding security directly into the software development lifecycle, platform architecture, and cloud environments. \nYou balance high-level security architecture with hands-on engineering, conducting threat modeling, establishing DevSecOps practices, and following a pragmatic and robust approach to risk management. \nAs a technical leader, you guide and coach cross-functional teams, cultivate security awareness across accounts, and navigate complex stakeholder environments to build resilient, trustworthy software solutions.\nDue to the nature of the projects and specific client security clearance , this role requires the successful candidate to be a Singapore Citizen Or Singapore Permanent residents.\nJob Responsibilities\nYou will lead the design and implementation of enterprise security architectures, zero-trust patterns, and DevSecOps practices and controls across software delivery teams.\nYou will act as a primary technical advisor to client stakeholders and engineering leads, aligning information security strategies with enterprise risk tolerances and business goals.\nYou will champion shifting security left in the software development lifecycle by integrating automated SAST, DAST, SCA, and secrets management into CI/CD pipelines.\nYou will conduct threat modeling sessions, security risk assessments, and architectural reviews to identify vulnerabilities and design pragmatic mitigations alongside delivery teams.\nYou will oversee cloud platform security governance, Identity and Access Management (IAM), container security (Kubernetes, Docker), and Infrastructure as Code (IaC) compliance across AWS, Azure, or GCP.\nYou will guide vulnerability management, security incident response workflows, and audit readiness to ensure alignment with industry regulations and public sector standards (e.g., Singapore IM8 / IM8+, SOC 2, ISO 27001, NIST).\nYou will partner closely with cross-functional teams-including software developers, infrastructure engineers, quality analysts, and product managers-to balance security controls with delivery velocity.\nYou will cultivate Thoughtworker growth and development by mentoring engineers, providing ongoing supportive feedback, and fostering an inclusive team culture.\nYou will apply the latest technology thinking and security insights from our Technology Radar to solve complex client security challenges.\nYou will contribute to Thoughtworks’ security community of practice, supporting pre-sales pursuits, capability development, and technical thought leadership.\nProfessional Skills\nYou bring 7+ years of experience in information security engineering, application security, or cloud security within fast-paced software delivery environments.\nYou possess deep expertise in secure software development practices, threat modeling methodologies (e.g., STRIDE, PASTA), and security standards such as OWASP Top 10 and SANS Top 25.\nYou have hands-on experience with security automation tools (SAST, DAST, IAST, SCA, secrets scanners) and integrating them into continuous integration and continuous delivery pipelines.\nYou bring strong technical capabilities in securing cloud infrastructure (AWS, Azure, GCP), container platforms (Kubernetes, Docker), and Infrastructure as Code (IaC) environments.\nYou have a solid foundation in cryptography, Identity and Access Management (IAM), zero-trust architecture, network security, and API security.\nYou possess practical knowledge of regulatory frameworks and compliance standards, such as Singapore Public Sector IM8 / IM8+, SOC 2, ISO 27001 (ISMS), PCI-DSS, or GDPR.\nYou are a natural mentor and technical leader, skilled at inspiring cross-functional teams, driving security awareness, and coaching peers.\nYou demonstrate excellent communication and stakeholder management skills, with a proven ability to translate complex security risks into actionable business decisions for leadership.\nYou are resilient in ambiguous situations, capable of evaluating trade-offs under constraints and solving security challenges from technical and business perspectives.\nYou bring an open and thoughtful mindset toward AI, exploring AI-assisted security automation, threat detection, and responsible AI governance practices.\nOther Things to Know\nLearning and Development\nThere is no one-size-fits-all career path at Thoughtworks: However you want to develop your career is entirely up to you. But we also balance autonomy with the strength of our cultivation culture. This means your career is supported by interactive tools, numerous development programs and teammates who want to help you grow. We see value in helping each other be our best and that extends to empowering our employees in their career journeys.\n[For recruiters] how to use this section: This section can be used to provide supplemental information for candidates that pertains to their overall experience at Thoughtworks. This includes career development programs and travel requirements. You can link to your regional benefits page here as well, but please do not paste specific benefits into this section.\nAbout Thoughtworks\nThoughtworks is a dynamic and inclusive community of bright and supportive colleagues who are revolutionizing tech. As a leading technology consultancy, we’re pushing boundaries through our purposeful and impactful work. For 30+ years, we’ve delivered extraordinary impact together with our clients by helping them solve complex business problems with technology as the differentiator. Bring your brilliant expertise and commitment for continuous learning to Thoughtworks. Together, let’s be extraordinary.\nSee here our AI policy.","description_format":"text","description_chars":5949,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","UI/UX Design","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-09-10T05:34:24Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.669,"p_room":0.36,"age_days":66,"expected_fill_days":36,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/thoughtworks-lead-application-security-engineer-2","json_url":"https://alion.io/job/thoughtworks-lead-application-security-engineer-2.json","meta":{"generated_at":"2026-10-17T07:06:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9677,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6249},"rest":"https://alion.io/mcp/rest/get_company?id=6249"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthoughtworks-lead-application-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthoughtworks-lead-application-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthoughtworks-lead-application-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thoughtworks-lead-application-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthoughtworks-lead-application-security-engineer-2"}]}