AI Security Platform Engineer — Zero-Trust IAM Lead

GIC; Singapore; Hybrid; SGD 120,000 - 160,000; Full time

Benefits offered by this job

Flexible work schedule

Diverse and inclusive work environment

Professional growth opportunities

Job summary

GIC in Singapore seeks an AI Security Engineer to drive security strategy for their AI platform. The role involves designing the security architecture, embedding features like zero-trust principles, and managing agent identities. Successful candidates will have over 8 years of experience in security engineering, with deep expertise in policy-as-code, cloud security, and hands-on coding in Python. The role emphasizes collaboration with various teams to ensure a secure environment and adherence to high security standards.

Qualifications

• 8+ years in security engineering, application security, or platform security.
• Experience in designing per-request verification, least-privilege access, and micro-segmentation.
• Hands-on with AWS workload identity.

Responsibilities

• Design and implement security architecture for the AI platform.
• Develop and maintain the AI-specific threat model and mitigation strategies.
• Collaborate with cybersecurity teams to align standards and tooling.

Skills

Security engineering

Application security

Platform security

Threat modelling

Policy-as-code

Cloud security

Hands-on coding in Python

Education

8+ years in security engineering

Tools

Cedar

Amazon Verified Permissions

OPA

AWS Security Hub

Job description

GIC in Singapore seeks an AI Security Engineer to drive security strategy for their AI platform. The role involves designing the security architecture, embedding features like zero-trust principles, and managing agent identities. Successful candidates will have over 8 years of experience in security engineering, with deep expertise in policy-as-code, cloud security, and hands-on coding in Python. The role emphasizes collaboration with various teams to ensure a secure environment and adherence to high security standards.