About the company
At Pelago, we’re reimagining how travelers explore the world, delivering curated rewarding experiences backed by the quality and trust of the Singapore Airlines Group. As a key part of the SIA ecosystem, we offer exclusive value, deals, and seamless KrisFlyer integration for travelers across Singapore Airlines, Scoot, and beyond. We are a fast-growing, high-ownership team looking for builders to scale our next phase of growth.
Responsibilities
- Build a robust, scalable, and proactive security program.
- Work closely with engineering, operations, and leadership to secure our infrastructure, applications, and internal environments.
- Implement and integrate SAST/DAST tools (e.g., Snyk, Veracode, Checkmarx, Burp Suite).
- Secure cloud infrastructure (AWS) using native and third-party security tools.
- Develop and operationalise security policies and standards.
- Run vulnerability management programs.
- Manage SOC monitoring and incident response workflows.
Requirements
- 5+ years of experience in cybersecurity, security engineering, or related roles, preferably in a cloud-native environment.
- Solid understanding of networking, authentication, encryption, and access control principles.
- Comfortable building programs from scratch with minimal direction.
- Strong written and verbal communication skills — especially in documenting security practices and working with engineering teams.
- Knowledge of secure software development practices and OWASP principles.
- Good technical expertise in SIEM solutions (e.g., Splunk, Crowdstrike, Datadog, Sentinel).
- Developing and operationalising security policies and standards.
- Running vulnerability management programs.
- SOC monitoring and incident response workflows.
- Implementing and integrating SAST/DAST tools (e.g., Snyk, Veracode, Checkmarx, Burp Suite).
- Securing cloud infrastructure (AWS) using native and third-party security tools.
Conditions
- Hybrid work at International Plaza.
- Opportunity to work with a fast-growing team.