Plaud

2 months ago

Security Engineer (Application Security) - Singapore

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Join Plaud as a Senior Security Engineer responsible for owning one or more security domains (cloud infrastructure, data security, application/AI security, hardware/firmware, security operations, or enterprise IT security). Build and implement secure controls, secure SDLC, and cross-domain risk management in a fast-moving, product-driven environment. You’ll work with AWS/GCP, CSPM, IAM, SIEM, and EDR/MDM, shaping Plaud’s security posture and data protection.

Location: Singapore

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Own one or more security domains (cloud/infrastructure, data security, application/AI security, hardware/firmware security, security operations, or enterprise IT security) and communicate risk to leadership.
•Embed secure SDLC practices by integrating SAST/DAST into CI/CD pipelines and defending against modern threats such as Prompt Injection and LLM risks.
•Secure Plaud's cloud environments (AWS/GCP), implement CSPM, and establish IAM controls and Zero Standing Privileges (JIT/CIEM).
•Build and run security operations capabilities (SIEM, IR playbooks, MTTR/MTTD metrics) and drive enterprise IT security initiatives (EDR, MDM, IdP/SSO).
•Collaborate with product and engineering teams to design and deploy security controls from scratch, selecting tools and ensuring compliance with standards (NIST CSF, CIS Benchmarks, ISO 27001, EN 18031).

Pay and Benefits

Perks:EsopHealth Insurance

Key Requirements

•5+ years of hands-on security engineering experience with deep expertise in at least one domain: cloud security (AWS/GCP, CSPM, IAM), data security (classification, DLP, audit logging), application/AI security (SAST/DAST, LLM/Prompt Injection), hardware/firmware security (embedded systems, PKI, EN 18031), security operations (SIEM, IR, SOAR), or enterprise IT security (EDR, MDM, IdP/SSO).
•Proven ability to build security controls from zero in a fast-moving environment — scoping work, selecting tools, and delivering independently without a pre-existing framework.
•Cross-domain awareness: ability to reason about how cloud, data, product, hardware, and operational security interlock — and communicate risk clearly to engineering and leadership.
•Familiarity with relevant standards and frameworks as applicable to your domain: NIST CSF, CIS Benchmarks, OWASP / OWASP LLM Top 10, MITRE ATT&CK, SOC 2, ISO 27001, EN 18031, GDPR/PIPL.
•Experience using AI tools (LLM-assisted triage, automated CSPM, AI coding tools) to amplify security output — or genuine curiosity to adopt them in your workflow.

Experience:CybersecurityAI securityCloud securitySCCSaaSCloud

Skills:CommunicationProblem-solvingAnalytical thinkingCross-functional collaborationRisk management

Tech Stack:AWSGCPCSPMTerraformCheckovSASTDASTLLMPrompt InjectionMITRE ATT&CKISO 27001EN 18031GDPRSSOSCIMEDRMDM

Company Brief

Plaud

Builds AI-native hardware and software note-taking devices and apps (Plaud NOTE, NotePin) that record, transcribe, summarize, and extract insights from conversations to boost professional productivity.

Industry: Hardware Devices

Company Size: Medium (51 to 250 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Funding: Bootstrapped

Headquarters: San Francisco, United States

Founded: 2021

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Plaud

2 months ago

Security Engineer (Application Security) - Singapore

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Location: Singapore

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Own one or more security domains (cloud/infrastructure, data security, application/AI security, hardware/firmware security, security operations, or enterprise IT security) and communicate risk to leadership.
•Embed secure SDLC practices by integrating SAST/DAST into CI/CD pipelines and defending against modern threats such as Prompt Injection and LLM risks.
•Secure Plaud's cloud environments (AWS/GCP), implement CSPM, and establish IAM controls and Zero Standing Privileges (JIT/CIEM).
•Build and run security operations capabilities (SIEM, IR playbooks, MTTR/MTTD metrics) and drive enterprise IT security initiatives (EDR, MDM, IdP/SSO).
•Collaborate with product and engineering teams to design and deploy security controls from scratch, selecting tools and ensuring compliance with standards (NIST CSF, CIS Benchmarks, ISO 27001, EN 18031).

Pay and Benefits

Perks:EsopHealth Insurance

Key Requirements

•5+ years of hands-on security engineering experience with deep expertise in at least one domain: cloud security (AWS/GCP, CSPM, IAM), data security (classification, DLP, audit logging), application/AI security (SAST/DAST, LLM/Prompt Injection), hardware/firmware security (embedded systems, PKI, EN 18031), security operations (SIEM, IR, SOAR), or enterprise IT security (EDR, MDM, IdP/SSO).
•Proven ability to build security controls from zero in a fast-moving environment — scoping work, selecting tools, and delivering independently without a pre-existing framework.
•Cross-domain awareness: ability to reason about how cloud, data, product, hardware, and operational security interlock — and communicate risk clearly to engineering and leadership.
•Familiarity with relevant standards and frameworks as applicable to your domain: NIST CSF, CIS Benchmarks, OWASP / OWASP LLM Top 10, MITRE ATT&CK, SOC 2, ISO 27001, EN 18031, GDPR/PIPL.
•Experience using AI tools (LLM-assisted triage, automated CSPM, AI coding tools) to amplify security output — or genuine curiosity to adopt them in your workflow.

Experience:CybersecurityAI securityCloud securitySCCSaaSCloud

Skills:CommunicationProblem-solvingAnalytical thinkingCross-functional collaborationRisk management

Tech Stack:AWSGCPCSPMTerraformCheckovSASTDASTLLMPrompt InjectionMITRE ATT&CKISO 27001EN 18031GDPRSSOSCIMEDRMDM

Company Brief

Plaud

Industry: Hardware Devices

Company Size: Medium (51 to 250 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Funding: Bootstrapped

Headquarters: San Francisco, United States

Founded: 2021

Website LinkedIn