SeniorSecurity Engineer (Application Security) - Singapore

Plaud
Singapore
Workplace: OnsiteFull timeFunction: CybersecuritySkills: ["Communication","Problem-solving","Analytical thinking","Cross-functional collaboration","Risk management"]

Join Plaud as a Senior Security Engineer responsible for owning one or more security domains (cloud infrastructure, data security, application/AI security, hardware/firmware, security operations, or enterprise IT security). Build and implement secure controls, secure SDLC, and cross-domain risk management in a fast-moving, product-driven environment. You’ll work with AWS/GCP, CSPM, IAM, SIEM, and EDR/MDM, shaping Plaud’s security posture and data protection.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Plaud
Plaud
3 months ago

SeniorSecurity Engineer (Application Security) - Singapore

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Join Plaud as a Senior Security Engineer responsible for owning one or more security domains (cloud infrastructure, data security, application/AI security, hardware/firmware, security operations, or enterprise IT security). Build and implement secure controls, secure SDLC, and cross-domain risk management in a fast-moving, product-driven environment. You’ll work with AWS/GCP, CSPM, IAM, SIEM, and EDR/MDM, shaping Plaud’s security posture and data protection.
Location: Singapore
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Own one or more security domains (cloud/infrastructure, data security, application/AI security, hardware/firmware security, security operations, or enterprise IT security) and communicate risk to leadership.
  • •Embed secure SDLC practices by integrating SAST/DAST into CI/CD pipelines and defending against modern threats such as Prompt Injection and LLM risks.
  • •Secure Plaud's cloud environments (AWS/GCP), implement CSPM, and establish IAM controls and Zero Standing Privileges (JIT/CIEM).
  • •Build and run security operations capabilities (SIEM, IR playbooks, MTTR/MTTD metrics) and drive enterprise IT security initiatives (EDR, MDM, IdP/SSO).
  • •Collaborate with product and engineering teams to design and deploy security controls from scratch, selecting tools and ensuring compliance with standards (NIST CSF, CIS Benchmarks, ISO 27001, EN 18031).

Pay and Benefits

Perks:EsopHealth Insurance

Key Requirements

  • •5+ years of hands-on security engineering experience with deep expertise in at least one domain: cloud security (AWS/GCP, CSPM, IAM), data security (classification, DLP, audit logging), application/AI security (SAST/DAST, LLM/Prompt Injection), hardware/firmware security (embedded systems, PKI, EN 18031), security operations (SIEM, IR, SOAR), or enterprise IT security (EDR, MDM, IdP/SSO).
  • •Proven ability to build security controls from zero in a fast-moving environment — scoping work, selecting tools, and delivering independently without a pre-existing framework.
  • •Cross-domain awareness: ability to reason about how cloud, data, product, hardware, and operational security interlock — and communicate risk clearly to engineering and leadership.
  • •Familiarity with relevant standards and frameworks as applicable to your domain: NIST CSF, CIS Benchmarks, OWASP / OWASP LLM Top 10, MITRE ATT&CK, SOC 2, ISO 27001, EN 18031, GDPR/PIPL.
  • •Experience using AI tools (LLM-assisted triage, automated CSPM, AI coding tools) to amplify security output — or genuine curiosity to adopt them in your workflow.
Experience:CybersecurityAI securityCloud securitySCCSaaSCloud
Skills:CommunicationProblem-solvingAnalytical thinkingCross-functional collaborationRisk management
Tech Stack:AWSGCPCSPMTerraformCheckovSASTDASTLLMPrompt InjectionMITRE ATT&CKISO 27001EN 18031GDPRSSOSCIMEDRMDM

Company Brief

Plaud
Builds AI-native hardware and software note-taking devices and apps (Plaud NOTE, NotePin) that record, transcribe, summarize, and extract insights from conversations to boost professional productivity.
Industry: Hardware Devices
Company Size: Medium (51 to 250 employees)
Revenue: USD 100M to 250M
Growth: Scaleup
Funding: Bootstrapped
Headquarters: San Francisco, United States
Founded: 2021
WebsiteLinkedIn