[Hiring] Lead Information Security Specialist @Thoughtworks

Role Description

Lead Security Specialists are instrumental in ensuring the delivery of robust and secure software for our clients. These experts thrive in collaborative settings, engaging with diverse cross-functional teams to pinpoint and mitigate vulnerabilities in code, systems architecture, and infrastructure. With a strong understanding of application security practices and a keen understanding of agile methodologies, they advocate for security integration as a fundamental aspect of software development.

Their work helps to embed a culture of security that aligns with agile and DevOps philosophies, ensuring that security measures enhance, rather than hinder, organizational objectives. By guiding teams and clients through the nuances of security automation and best practices, Application Security Specialists safeguard digital assets and champion a mindset where security and development go hand in hand.

Due to the nature of the projects and specific client security clearance, this role requires the successful candidate to be a Singapore Citizen.

Qualifications

• 7+ years of experience as a security engineer with direct involvement in working with delivery teams to identify vulnerabilities in code and systems architecture.
• Demonstrated experience with implementing security automation and familiarity with agile development methodologies.

Requirements

• Applied expertise in security architecture principles, manual/automated code reviews, OWASP/SANS standards, and penetration testing techniques.
• Proficiency in manual and automated penetration testing tools and techniques.
• Experience with SAST, DAST, Dependency checking, and container vulnerability assessment tools such as Checkmarx, Burp, ZAP, Fortify, Trivy, etc.
• Basic understanding of firewall, virtualization, container, networking, and OS security.
• Knowledge of cloud security best practices and basic knowledge of cloud providers like AWS, Azure, and GCP.
• Knowledge and experience in password/secret management tools and techniques.
• Understanding of DevSecOps and experience in security automation.
• Excellent communication and interpersonal skills, with the ability to manage relationships at senior levels of leadership.
• Strong consulting skills, including the ability to promote security awareness and influence decision-making within delivery teams.
• Ability to anticipate problems and understand the long-term implications of decisions and actions.
• Experience in developing security testing plans and integrating them into the software development lifecycle.

Benefits

• Learning & Development: There is no one-size-fits-all career path at Thoughtworks; however you want to develop your career is entirely up to you. We balance autonomy with the strength of our cultivation culture, supported by interactive tools, numerous development programs, and teammates who want to help you grow.