Senior Lead Cybersecurity Architect

Senior Lead Cybersecurity Architect

Location: Singapore

About Us

Dymon Asia Capital (“Dymon Asia”), founded in 2008, is a leading alternative investment firm with assets across public and private markets. The firm’s flagship hedge fund product is the Multi-Strategy Investment Fund (MSIF), an Asia-focused multi-manager multi-strategy fund that seeks to generate absolute consistent uncorrelated returns from emerging and developed markets.

Headquartered in Singapore, Dymon Asia operates from nine offices across the Middle East and Asia, including Hong Kong, Tokyo, Dubai, Shanghai, Mumbai, and Kuala Lumpur. Our platform is built on our people. We bring together diverse perspectives, expertise, and experience across our multi-strategy and private markets businesses. Maintaining a collaborative culture where our people are set up to do their best work is central to how we operate.

We are building out our Cybersecurity function across four pillars: Architecture and Engineering, Security Operations, Security Governance, and Cybersecurity Project Management. This role owns the Architecture and Engineering pillar and is the firm’s formal security design authority, setting the target security architecture and the standards that infrastructure, cloud, trading, and application changes are built against, and taking those designs through build and into operation.

Our environment is Microsoft-centric, with Azure as our only public cloud. The role is roughly 60% hands-on engineering and 40% architecture and design, with the secure adoption of LLMs and AI agents a key priority. It suits an architect who builds right-sized defenses that protect the business without getting in the way of trading.

Key Responsibilities

• Own the Architecture and Engineering pillar, including the firm’s target security architecture, reference designs, and architecture roadmap, aligned to the cybersecurity strategy set by the Head of Cybersecurity.
• Act as the formal security design authority, with sign-off on material infrastructure, cloud, trading, application, AI, and vendor changes through the change process, setting engineering guardrails and documenting the risk position where a design deviates from standard.
• Own the security architecture for LLM and AI agent adoption, including Microsoft Copilot and agent platforms, covering agent identity and least-privilege access, controls against prompt injection and data leakage, Purview governance of AI interactions, and logging that Security Operations can monitor.
• Secure the trading environment, including order and execution management systems, FIX and broker connectivity, co-location, and market data infrastructure, designing controls that respect latency and availability requirements.
• Own identity and access architecture across Entra ID, including conditional access, Privileged Identity Management, service, workload, and AI agent identities, and secrets management, as the foundation of a Zero Trust model.
• Design secure Azure landing zones, SonicWall perimeter and network segmentation, and Intune and Defender hardening baselines, using Azure Policy and infrastructure as code to prevent drift.
• Architect data protection for trading strategies, research data, model code, and investor information, using Microsoft Purview, encryption, key management, and ransomware-resistant backup and recovery.
• Secure the engineering and research environment, including source code repositories, CI/CD pipelines, and quantitative research platforms, and run threat modelling for new platforms, AI use cases, SaaS adoption, and key third-party providers.
• Lead technical delivery of major security initiatives with the Cybersecurity Project Manager, from design through build, testing, and operational handover, and turn penetration test, red team, audit, and risk register findings into engineered fixes.
• Maintain architecture evidence and control mapping aligned to MAS Technology Risk Management guidelines, applicable MAS notices, and NIST CSF 2.0, and present architecture decisions and risk trade-offs to technology leadership.

Job Requirements

• Degree in Computer Science, Information Security, or a related discipline preferred. SC-100, AZ-500, SC-300, CISSP, CCSP, or SABSA certifications are advantageous.
• 10+ years in cybersecurity engineering and architecture, including 4+ years as a lead security architect or design authority in financial services, ideally at a hedge fund, asset manager, or investment bank.
• Proven track record of designing and personally delivering security architecture in a hybrid Microsoft and Azure environment, through to operational handover.
• Experience securing trading environments, including order and execution management systems, FIX connectivity, co-location, or market data infrastructure, with an understanding of latency and availability constraints.
• Practical experience securing LLM and AI agent adoption, with working knowledge of the OWASP Top 10 for LLM Applications and the NIST AI RMF.
• Engineering depth across Entra ID, conditional access, PIM, Intune, Defender XDR, Defender for Cloud, Purview, and Azure security architecture, with practical Zero Trust design experience.
• Network security architecture experience, including next-generation firewalls, segmentation, and secure remote access. SonicWall experience is advantageous.
• Infrastructure as code using Terraform or Bicep, and scripting in PowerShell or Python. KQL is advantageous.
• Threat modelling using STRIDE or MITRE ATT&CK, with working knowledge of MAS Technology Risk Management guidelines and NIST CSF 2.0.
• Sound right-sizing judgement, with the ability to explain trade-offs clearly to engineers and senior stakeholders and hold a position as design authority.