Plaud

2 months ago

Security Engineer, Infra & Operations - Singapore

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Owns the detection & response layer and cloud infrastructure security at Plaud, delivering SOC 2 Type II audit readiness by Q4 2026. Lead cloud security remediation across AWS/GCP, deploy CSPM, embed IaC gates, build SIEM with 30+ MITRE ATT&CK-mapped rules, manage incident response end-to-end, maintain audit evidence, and publish security risk governance and reports in a fast-paced product environment.

Location: Singapore

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Cloud & Infrastructure Security — Remediate credential exposure across AWS/GCP production environments, deploy and tune CSPM across all accounts, embed IaC security gates (Checkov/Terraform) into CI/CD, and implement Zero Standing Privileges via JIT/CIEM.
•SIEM Build & Detection Engineering — Deploy the SIEM platform and author 30+ MITRE ATT&CK-mapped detection rules spanning cloud telemetry, endpoint, and SaaS — with ongoing tuning to reduce false positives and maintain coverage fidelity.
•Incident Response — Own the IR lifecycle end-to-end: develop playbooks across a minimum of 4 incident categories, lead cross-functional response for P1/P2 events, and drive MTTD to ≤60 minutes.
•SOC 2 TII Operational Evidence — Produce and maintain the continuous evidence package required for audit — log retention, alert records, control review cadences, and written control narratives for Cloud Security and SecOps domains.
•Security Reporting & Risk Governance — Publish monthly security reports to leadership, deliver H1 risk governance reports, and maintain vulnerability SLA compliance ≥90% with clear remediation tracking.

Key Requirements

•5+ years of hands-on security engineering experience with depth in cloud security (AWS/GCP, CSPM, IAM, IaC) or security operations (SIEM, IR, SOAR, detection engineering) — and fluency in the other.
•Proven ability to build security infrastructure from zero: tool selection, baseline configuration, and policy definition without inheriting a mature program or existing runbook.
•Strong working knowledge of MITRE ATT&CK, CIS Benchmarks (L1/L2), cloud-native security tooling (AWS Security Hub, GCP SCC, or equivalent CSPM), and log source integration across cloud and endpoint layers.
•Familiarity with SOC 2 TII control requirements — CC6 (logical access), CC7 (monitoring & detection), and the operational evidence standards expected by a third-party auditor.
•Routinely uses LLMs as part of daily security workflow — alert summarization, detection rule generation, SOAR playbook drafting, or IaC policy automation.

Experience:5+ yearsCybersecurityCloud securitySecurity operationsSOC 2ATT&CK

Skills:Cloud securitySIEMIRSOARDetection engineeringMITRE ATT&CKCIS BenchmarksTerraformCheckovCIEMIAMAWSGCPLog source integrationEndpoints

Tech Stack:AWSGCPCSPMIAMIaCTerraformCheckovSaaSSIEMSOAR

Company Brief

Plaud

Builds AI-native hardware and software note-taking devices and apps (Plaud NOTE, NotePin) that record, transcribe, summarize, and extract insights from conversations to boost professional productivity.

Industry: Hardware Devices

Company Size: Medium (51 to 250 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Funding: Bootstrapped

Headquarters: San Francisco, United States

Founded: 2021

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Plaud

2 months ago

Security Engineer, Infra & Operations - Singapore

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Location: Singapore

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Cloud & Infrastructure Security — Remediate credential exposure across AWS/GCP production environments, deploy and tune CSPM across all accounts, embed IaC security gates (Checkov/Terraform) into CI/CD, and implement Zero Standing Privileges via JIT/CIEM.
•SIEM Build & Detection Engineering — Deploy the SIEM platform and author 30+ MITRE ATT&CK-mapped detection rules spanning cloud telemetry, endpoint, and SaaS — with ongoing tuning to reduce false positives and maintain coverage fidelity.
•Incident Response — Own the IR lifecycle end-to-end: develop playbooks across a minimum of 4 incident categories, lead cross-functional response for P1/P2 events, and drive MTTD to ≤60 minutes.
•SOC 2 TII Operational Evidence — Produce and maintain the continuous evidence package required for audit — log retention, alert records, control review cadences, and written control narratives for Cloud Security and SecOps domains.
•Security Reporting & Risk Governance — Publish monthly security reports to leadership, deliver H1 risk governance reports, and maintain vulnerability SLA compliance ≥90% with clear remediation tracking.

Key Requirements

•5+ years of hands-on security engineering experience with depth in cloud security (AWS/GCP, CSPM, IAM, IaC) or security operations (SIEM, IR, SOAR, detection engineering) — and fluency in the other.
•Proven ability to build security infrastructure from zero: tool selection, baseline configuration, and policy definition without inheriting a mature program or existing runbook.
•Strong working knowledge of MITRE ATT&CK, CIS Benchmarks (L1/L2), cloud-native security tooling (AWS Security Hub, GCP SCC, or equivalent CSPM), and log source integration across cloud and endpoint layers.
•Familiarity with SOC 2 TII control requirements — CC6 (logical access), CC7 (monitoring & detection), and the operational evidence standards expected by a third-party auditor.
•Routinely uses LLMs as part of daily security workflow — alert summarization, detection rule generation, SOAR playbook drafting, or IaC policy automation.

Experience:5+ yearsCybersecurityCloud securitySecurity operationsSOC 2ATT&CK

Skills:Cloud securitySIEMIRSOARDetection engineeringMITRE ATT&CKCIS BenchmarksTerraformCheckovCIEMIAMAWSGCPLog source integrationEndpoints

Tech Stack:AWSGCPCSPMIAMIaCTerraformCheckovSaaSSIEMSOAR

Company Brief

Plaud

Industry: Hardware Devices

Company Size: Medium (51 to 250 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Funding: Bootstrapped

Headquarters: San Francisco, United States

Founded: 2021

Website LinkedIn