Security Engineer

WHO ARE WE? At Pelago, we’re reimagining how travelers explore the world, delivering curated rewarding experiences backed by the quality and trust of the Singapore Airlines Group. As a key part of the SIA ecosystem, we offer exclusive value, deals, and seamless KrisFlyer integration for travelers across Singapore Airlines, Scoot, and beyond. We are a fast-growing, high-ownership team looking for builders to scale our next phase of growth. WHAT WILL YOU BE DOING? As our Security Engineer, you will be responsible for building a robust, scalable, and proactive security program. You will work closely with engineering, operations, and leadership to secure our infrastructure, applications, and internal environments. We’re seeking someone with strong hands-on expertise in SIEM, Security Policy development, Vulnerability Management, Security Operations (SOC), SAST/DAST testing, and Cloud Security. WHAT EXPERTISE ARE MUST HAVES FOR THIS ROLE? • 5+ years of experience in cybersecurity, security engineering, or related roles, preferably in a cloud-native environment. • Solid understanding of networking, authentication, encryption, and access control principles. • Comfortable building programs from scratch with minimal direction. • Strong written and verbal communication skills — especially in documenting security practices and working with engineering teams. • Knowledge of secure software development practices and OWASP principles • Good technical expertise in: SIEM solutions (e.g., Splunk, Crowdstrike, Datadog, Sentinel) • Developing and operationalising security policies and standards. • Running vulnerability management programs. • SOC monitoring and incident response workflows. • Implementing and integrating SAST/DAST tools (e.g., Snyk, Veracode, Checkmarx, Burp Suite). • Securing cloud infrastructure (AWS) using native and third-party security tools. WHAT EXPERTISE ARE GOOD TO HAVE FOR THIS ROLE? • Security certifications (e.g., CISSP, OSCP, AWS Certified Security Specialty). • Experience with DevSecOps practices and securing containerized applications. • Previous experience scaling security programs in a startup or hypergrowth environment. • Familiarity with regulatory frameworks like SOC 2 or ISO 27001 Ready to apply? Submit your resume below, and our talent team will be in touch!