Cloud Security Engineer

WENETWORK PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

WENETWORK PTE. LTD. in Singapore is seeking a hands-on Cloud Security Engineer to own and evolve its cloud security posture across Azure and GCP, securing AI/ML workloads and enabling automation with AI-assisted tooling.

You will design controls, build threat detection, deploy SIEM/SOAR, and govern identity and access using Entra ID, while aligning security with regulatory mandates and customer needs. You will collaborate with platform teams to embed security across the SDLC and drive the

Qualifications

• 5+ years of hands-on cloud security experience with Azure.
• Strong knowledge of IAM/federation protocols and Entra ID.
• Experience with CSPM/CNAPP tooling and Defender for Cloud.
• SIEM/SOAR implementation and automation development.
• Python scripting and AI-assisted tooling.
• Knowledge of AI/LLM security concepts (e.g., OWASP Top 10 for LLMs).
• GCP Professional Cloud Security Engineer certification is a plus.

Responsibilities

• Build and tune threat detection across Azure and GCP multi-cloud.
• Deploy and operate SIEM/SOAR platforms with AI-assisted detection.
• Govern identity and access using Entra ID for humans and non-human identities.
• Secure AI/LLM systems against prompt injection and model exfiltration.
• Collaborate with cloud infrastructure and platform teams to embed security across the SDLC.
• Maintain and drive the security roadmap to meet regulatory mandates and customer demands.

Skills

Azure security

IAM & SSO

CSPM / CNAPP

SIEM / SOAR

Python & AI tooling

AI/LLM security

GCP security

Job description

Cloud Security Engineer | Singapore

A fast-growing technology company is looking for a hands-on Cloud Security Engineer to own and evolve its cloud security posture across a primarily Microsoft Azure environment, with GCP in the mix. You will be the go-to security engineer, designing controls, building detection capabilities, and securing AI/ML workloads, while using automation and AI tooling to operate with high leverage.

What you'll do:

• Build and tune threat detection across multi-cloud infrastructure (Azure/GCP), covering containers, Kubernetes, IoT/OT, and AI/ML workloads
• Deploy and operate SIEM/SOAR platforms including AI-assisted detection, triage, and automated response playbooks
• Govern identity and access for human and non-human identities (service principals, workload identities, AI agents) using Microsoft Entra ID
• Secure AI/LLM systems against threats such as prompt injection, model exfiltration, and insecure agent permissions
• Collaborate with cloud infrastructure and platform teams to embed security across the SDLC
• Maintain and drive the security roadmap aligned to regulatory mandates and customer demands

What you'll bring:

• 5+ years of hands‑on cloud security experience with deep Azure expertise (AZ-500 or SC-100 required or strongly preferred)
• Strong knowledge of IAM/federation protocols (SAML, OAuth 2.0, OIDC) and Microsoft Entra ID
• Hands‑on experience with CSPM/CNAPP tooling (e.g. Microsoft Defender for Cloud)
• SIEM/SOAR experience including log onboarding and automation development
• Python scripting and AI‑assisted tooling proficiency
• Working knowledge of AI/LLM security concepts , OWASP Top 10 for LLMs, MITRE ATLAS, or NIST AI RMF
• GCP Professional Cloud Security Engineer certification is a plus