Description
GovTech is the lead agency driving Singapore's Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government's capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.
You will be working on the TradeNet project, which is Singapore's National Single Window for trade permit processing. The goal is to bring TradeNet in-house to strengthen technology ownership and long-term sustainability.
As a Lead Cybersecurity Engineer, you will oversee technical design and execution for the TradeNet CII modernization, driving architectural security, secure coding, DevSecOps practices, and platform reliability.
Responsibilities:
- Own the reference security architecture for the TradeNet CII
- Embed secure-by-design controls by working inside product and engineering teams
- Maintain a living threat model per system and trust boundary
- Engineer the platform's recoverability and graceful degradation
- Map and treat dependency and concentration risk across the TradeNet ecosystem
- Design for, and participate in, CSA-mandated cyber resilience exercising for the CII
- Partner with the Customs ACISO to meet CSA CII obligations
- Determine and document what the CII inherits from the GovTech security tech stack
- Express security control intent as code
- Champion secure SDLC and agile security practice within the delivery cadence
Requirements:
- A minimum of 10 years of engineering experience in software security
- Proven track record in building defensive controls into critical or government-scale platforms
- Deep familiarity with national security governance structures, specifically CSA CCoP v2 and WOG IM8
- Strong architectural judgment to evaluate system failure modes, trade continuity, and supply-chain risks
- Extensive experience across cloud environments, zero-trust patterns, cryptosystems, network isolation, and automated policy guardrails
- Experience using threat models to guide defensive design
- Ability to serve as technical design lead with the ACISO to establish defensible security specifications
- Hands-on DevSecOps and automation skill set
- Hands-on development experience in Kotlin/JVM, Node.js environments
Good to have:
- Relevant certifications in enterprise security architecture
- Must successfully satisfy national security vetting credentials required for Critical Information Infrastructure access