Security Engineer

WHO ARE WE?

At Pelago, we’re reimagining how travelers explore the world, delivering curated, rewarding experiences backed by the quality and trust of the Singapore Airlines Group. As a key part of the SIA ecosystem, we offer exclusive value, deals, and seamless KrisFlyer integration for travelers across Singapore Airlines, Scoot, and beyond. We are a fast-growing, high-ownership team looking for builders to scale our next phase of growth.

WHAT WILL YOU BE DOING?

As our Security Engineer, you will be responsible for building a robust, scalable, and proactive security program. You will work closely with engineering, operations, and leadership to secure our infrastructure, applications, and internal environments.

We’re seeking someone with strong hands-on expertise in SIEM, Security Policy development, Vulnerability Management, Security Operations (SOC), SAST/DAST testing, and Cloud Security.

WHAT EXPERTISE ARE MUST HAVES FOR THIS ROLE?

• 5+ years of experience in cybersecurity, security engineering, or related roles, preferably in a cloud-native environment.
• Solid understanding of networking, authentication, encryption, and access control principles.
• Comfortable building programs from scratch with minimal direction.
• Strong written and verbal communication skills — especially in documenting security practices and working with engineering teams.
• Knowledge of secure software development practices and OWASP principles
• Good technical expertise in: SIEM solutions (e.g., Splunk, Crowdstrike, Datadog, Sentinel)
• Developing and operationalising security policies and standards.
• Running vulnerability management programs.
• SOC monitoring and incident response workflows.
• Implementing and integrating SAST/DAST tools (e.g., Snyk, Veracode, Checkmarx, Burp Suite).
• Securing cloud infrastructure (AWS) using native and third-party security tools.

WHAT EXPERTISE ARE GOOD TO HAVE FOR THIS ROLE?

• Security certifications (e.g., CISSP, OSCP, AWS Certified Security Specialty).
• Experience with DevSecOps practices and securing containerized applications.
• Previous experience scaling security programs in a startup or hypergrowth environment.
• Familiarity with regulatory frameworks like SOC 2 or ISO 27001

Ready to apply? Submit your resume below, and our talent team will be in touch!