Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 22 hours ago

Senior Lead Cybersecurity Architect

Dymon Asia13 open roles

Where
Singapore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Lead Cybersecurity ArchitectDymon Asia · Singapore

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Dymon Asia's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Dymon Asia postings stay open a median of 11 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 22 hours ago

Dymon Asia median: 11 days open

The posting

Senior Lead Cybersecurity Architect

Location: Singapore

About Us

Dymon Asia Capital (“Dymon Asia”), founded in 2008, is a leading alternative investment firm with assets across public and private markets. The firm’s flagship hedge fund product is the Multi-Strategy Investment Fund (MSIF), an Asia-focused multi-manager multi-strategy fund that seeks to generate absolute consistent uncorrelated returns from emerging and developed markets.

Headquartered in Singapore, Dymon Asia operates from nine offices across the Middle East and Asia, including Hong Kong, Tokyo, Dubai, Shanghai, Mumbai, and Kuala Lumpur. Our platform is built on our people. We bring together diverse perspectives, expertise, and experience across our multi-strategy and private markets businesses. Maintaining a collaborative culture where our people are set up to do their best work is central to how we operate.

We are building out our Cybersecurity function across four pillars: Architecture and Engineering, Security Operations, Security Governance, and Cybersecurity Project Management. This role owns the Architecture and Engineering pillar and is the firm’s formal security design authority, setting the target security architecture and the standards that infrastructure, cloud, trading, and application changes are built against, and taking those designs through build and into operation.

Our environment is Microsoft-centric, with Azure as our only public cloud. The role is roughly 60% hands-on engineering and 40% architecture and design, with the secure adoption of LLMs and AI agents a key priority. It suits an architect who builds right-sized defenses that protect the business without getting in the way of trading.

Key Responsibilities

  • Own the Architecture and Engineering pillar, including the firm’s target security architecture, reference designs, and architecture roadmap, aligned to the cybersecurity strategy set by the Head of Cybersecurity.
  • Act as the formal security design authority, with sign-off on material infrastructure, cloud, trading, application, AI, and vendor changes through the change process, setting engineering guardrails and documenting the risk position where a design deviates from standard.
  • Own the security architecture for LLM and AI agent adoption, including Microsoft Copilot and agent platforms, covering agent identity and least-privilege access, controls against prompt injection and data leakage, Purview governance of AI interactions, and logging that Security Operations can monitor.
  • Secure the trading environment, including order and execution management systems, FIX and broker connectivity, co-location, and market data infrastructure, designing controls that respect latency and availability requirements.
  • Own identity and access architecture across Entra ID, including conditional access, Privileged Identity Management, service, workload, and AI agent identities, and secrets management, as the foundation of a Zero Trust model.
  • Design secure Azure landing zones, SonicWall perimeter and network segmentation, and Intune and Defender hardening baselines, using Azure Policy and infrastructure as code to prevent drift.
  • Architect data protection for trading strategies, research data, model code, and investor information, using Microsoft Purview, encryption, key management, and ransomware-resistant backup and recovery.
  • Secure the engineering and research environment, including source code repositories, CI/CD pipelines, and quantitative research platforms, and run threat modelling for new platforms, AI use cases, SaaS adoption, and key third-party providers.
  • Lead technical delivery of major security initiatives with the Cybersecurity Project Manager, from design through build, testing, and operational handover, and turn penetration test, red team, audit, and risk register findings into engineered fixes.
  • Maintain architecture evidence and control mapping aligned to MAS Technology Risk Management guidelines, applicable MAS notices, and NIST CSF 2.0, and present architecture decisions and risk trade-offs to technology leadership.

Job Requirements

  • Degree in Computer Science, Information Security, or a related discipline preferred. SC-100, AZ-500, SC-300, CISSP, CCSP, or SABSA certifications are advantageous.
  • 10+ years in cybersecurity engineering and architecture, including 4+ years as a lead security architect or design authority in financial services, ideally at a hedge fund, asset manager, or investment bank.
  • Proven track record of designing and personally delivering security architecture in a hybrid Microsoft and Azure environment, through to operational handover.
  • Experience securing trading environments, including order and execution management systems, FIX connectivity, co-location, or market data infrastructure, with an understanding of latency and availability constraints.
  • Practical experience securing LLM and AI agent adoption, with working knowledge of the OWASP Top 10 for LLM Applications and the NIST AI RMF.
  • Engineering depth across Entra ID, conditional access, PIM, Intune, Defender XDR, Defender for Cloud, Purview, and Azure security architecture, with practical Zero Trust design experience.
  • Network security architecture experience, including next-generation firewalls, segmentation, and secure remote access. SonicWall experience is advantageous.
  • Infrastructure as code using Terraform or Bicep, and scripting in PowerShell or Python. KQL is advantageous.
  • Threat modelling using STRIDE or MITRE ATT&CK, with working knowledge of MAS Technology Risk Management guidelines and NIST CSF 2.0.
  • Sound right-sizing judgement, with the ability to explain trade-offs clearly to engineers and senior stakeholders and hold a position as design authority.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Dymon Asia's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Dymon Asia's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Dymon Asia's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.