Nicoll Curtin Hiring! Full Time Full Stack Engineer (Applied Security) in - Ricebowl

We are looking for a technically driven Principal Engineer to take ownership of the architecture and engineering execution of a next-generation quantum security platform. This is a hands-on technical lead position suited to an experienced software engineer who enjoys solving complex engineering challenges across backend systems, frontend applications, distributed infrastructure, and cybersecurity technologies.

You will be instrumental in building a platform that enables enterprises to understand their cryptographic exposure, evaluate vulnerabilities associated with emerging quantum computing capabilities, and plan their transition towards post-quantum cryptography.

Beyond delivering software, you will influence technology strategy, establish architectural standards, and guide engineering teams in developing secure, scalable, and highly available enterprise applications.

What You Will Be Responsible For

Platform Architecture & Engineering

• Define the technical blueprint and architectural principles for a multi-layered security platform.
• Lead the development of scalable, modular, and maintainable software components across the entire application stack.
• Make key technology and architectural decisions to support long-term product evolution, performance, and security.
• Oversee integrations with enterprise systems, external services, and security infrastructure.

Backend Systems & Data Engineering

• Design and implement high-performance backend services using Go, Node.js, Python, Rust, or similar technologies.
• Develop APIs and distributed services supporting cryptographic asset discovery, security posture evaluation, risk prioritisation, and migration planning.
• Architect data storage solutions and processing frameworks capable of managing large volumes of cryptographic metadata.
• Build ingestion mechanisms that collect and consolidate information from enterprise networks, certificate repositories, codebases, and security scanning tools.

Frontend & Application Development

• Lead the development of responsive, feature-rich web applications using React, TypeScript, and modern frontend technologies.
• Build interactive interfaces for cryptographic visibility, risk assessment, reporting, and remediation management.
• Translate complex technical datasets into meaningful dashboards and actionable insights for security professionals and enterprise stakeholders.
• Ensure consistency, usability, performance, and maintainability across customer-facing applications.

Cryptography & Security Integration

• Work with established cryptographic frameworks and libraries to implement secure encryption and authentication capabilities.
• Support the adoption of post-quantum cryptographic algorithms and hybrid cryptographic approaches.
• Develop integrations involving TLS, PKI, digital certificates, encryption keys, and secure network communications.
• Ensure cryptographic implementations follow recognised standards and established security engineering principles.

Reliability, Security & Operational Excellence

• Establish engineering practices that support application resilience, scalability, and operational visibility.
• Implement monitoring, logging, tracing, and performance optimisation strategies across distributed services.
• Incorporate security validation throughout the software development process, including threat modelling, code analysis, automated testing, and vulnerability assessments.
• Promote secure coding standards, robust error handling, dependency controls, and defensive software design.

Experience & Technical Background

• 8 years of professional software engineering experience, including substantial exposure to full-stack application development.
• Strong proficiency in backend programming languages such as Go, Node.js, Python, or Rust.
• Practical frontend development experience with React, TypeScript, or comparable modern frameworks.
• Experience designing distributed systems, microservices, and enterprise-grade application architectures.
• Strong understanding of API technologies, including REST, GraphQL, and gRPC.
• Experience with relational and NoSQL databases, data modelling, caching, and large-scale data processing.
• Working knowledge of application security, including OWASP security principles, authentication, authorisation, and secure coding practices.
• Familiarity with OAuth 2.0, OIDC, RBAC, certificate handling, PKI concepts, and cryptographic key management.
• Understanding of common application and network security threats, including replay attacks, MITM, downgrade attacks, injection vulnerabilities, and denial-of-service risks.
• Experience with cloud platforms, containerisation, Kubernetes, CI/CD automation, and infrastructure-as-code.
• Strong familiarity with Linux development and production environments.
• Previous experience leading technical initiatives, reviewing architecture, and guiding other engineers.

Additional Skills That Will Set You Apart

• Cryptographic Modernisation: Understanding of crypto-agility, hybrid cryptographic implementations, and enterprise PQC adoption strategies.
• Post-Quantum Cryptography: Familiarity with emerging quantum-resistant standards, including NIST FIPS 203, FIPS 204, FIPS 205, ML-KEM, and ML-DSA.
• Cybersecurity Product Development: Experience building security platforms involving PKI, certificate management, vulnerability discovery, secure gateways, or technology asset management.
• AI-Enabled Engineering: Experience using AI-assisted development tools, coding agents, and LLM-based workflows to improve software engineering productivity.
• Cryptographic Software Ecosystems: Experience integrating or contributing to TLS implementations, cryptographic libraries, and security-focused open-source projects. Rust experience is particularly beneficial.

We regret to inform that due to project clearance requirements, only SG Citizens or SG PRs will be considered.