Lead Security Engineer

About the TeamWe are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.Get to know the Role (Lead Security Engineer):We are seeking a lead security engineer who can drive security strategy and initiatives from 0 to 1. This could be across a wide range of domains covering identity, application security, cloud, DevSecOps, or detection engineering. We are open to security engineers with deep skills in one or more of these domains.You will have excellent stakeholder management skills, and are able to operate and influence across the business.You should be excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.You will work with public cloud, terraform, commercial cloud posture security management tools, open-source and build tools that automate our security posture.The day-to-day activities:Work with the wider security engineering team to take security requirements and build scalable applications and solutions that automate security and reduce the risk of the bank.Own the strategy for assigned security domains, consisting of tactical initiatives and strategic multi-year decisions.Partner with teams across the bank including SRE, Data Engineering, Gen AI and Product to identify areas of security posture improvement, create the plan and execute.Maintain standards and procedures inline with regulatory and internal policy requirements.Lead engagements with internal and external audits that are applicable to first line technology.Mentor junior engineers to uplift their ability across security domains, increasing the team's knowledge and standard operating procedures.The must-haves:Should have relevant experience of 8-9+ years within information securityExperience with scripting/programming security automation.Knowledge of cloud platforms (AWS, Serverless, managed services, containers, etc)Excellent soft skills - able to handle pressure in a fast-paced environment. Open-minded, creative and innovative.Relevant certifications such as CISSP, CISM, CEH, or equivalent.In-depth knowledge of security frameworks, standards, and best practices.Proficiency in security technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection).Strong understanding of network protocols, operating systems, and application security.Excellent problem-solving, analytical, and decision-making skills.Strong leadership, communication, and collaboration abilities.Ability to manage multiple projects and priorities in a fast-paced environment.Core competenciesSecure software engineering and DevSecOpsDesigns and operates security controls across the software-development lifecycle, including GitLab security policies, SAST, dependency scanning, secret detection, and merge/pipeline controls.Improves developer security controls without unnecessarily slowing engineering delivery; for example, GitLab Advanced SAST multi-core tuning, Dependency Scanning v2 reachability analysis, and secret-detection pipeline optimisation.Application security and software supply-chain protectionImplements preventive controls at code-commit and CI/CD boundaries, including GitLab Secret Push Protection to block high-confidence secrets before they enter source control.Understands exception handling, auditability, pipeline tampering risks, and the need for governed change management.Container and cloud-native securityWorks across container security, hardened base images, image vulnerability scanning, Kubernetes/EKS environments, and secure build isolation.Applies evidence-based approval models for container image changes while retaining manual review for higher-risk changes.Vulnerability management and remediation engineeringOwns or contributes to vulnerability lifecycle processes spanning discovery, triage, ticketing, remediation, patch/EOL management, SLA tracking, and reporting.Contributes to Holocron, the bank’s vulnerability-management platform, including performance tuning, standardised triage logic, and automation of accountability workflows.Demonstrated focus on measurable outcomes, including production vulnerability SLA compliance and reduction of manual triage effort.Offensive security and penetration testingFormalises and executes penetration-testing workflows across mobile applications, web/API services, and banking journeys.Maintains evidence suitable for audit and governance, including offensive-security tickets, test reports, retests, and remediation tracking.Documented testing coverage includes retail transfer limits, dynamic SSL pinning, ecosystem credit cards, Singpass migration, OneDash, Chatbot 2.0, and other bank services.Purple teaming and adversary simulationApplies offensive-security techniques to validate defensive controls and simulate realistic attack paths against public-facing and mobile-bank systems.Demonstrated interest in AI-assisted offensive testing and autonomous penetration-testing capabilities through the Paladin initiative.Runtime security, detection engineering, and SOC integrationOperates at the intersection of application security, runtime protection, threat intelligence, and SOC workflows.Contributes to container/runtime detection, logging and alerting integration, and security ticket automation across tools such as Datadog, Jira, Slack, and AWS-native services.Security automation and platform engineeringBuilds scalable security services and workflows rather than relying on manual review alone.Demonstrated capability in AWS Lambda, Terraform, GitLab CI/CD, Jira integrations, Slack workflows, dashboards, and event-driven automation.Uses automation to improve traceability, reduce operational toil, remove single points of failure, and make security evidence more accessible.AI/LLM Security EngineeringEvaluates emerging AI/LLM risks such as prompt injection, hidden instructions, adversarial manipulation, data leakage, and command-driven exfiltration.Contributes to a bank-wide AI/LLM security methodology and the assessment of model and agent vulnerabilities using specialist testing tools.Security governance, auditability, and regulated-bank executionDesigns controls with evidence, ownership, exception handling, and audit traceability in mind.Connects technical implementation to banking risk requirements, change management, security standards, and line-one control operation.