Security Engineer

Simular Inc.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

Simular Inc. is seeking a dedicated security engineer to lead application and cloud security efforts in Singapore. This hands-on role entails direct involvement in securing the infrastructure and applications within a cutting-edge AI environment.

Ideal candidates will have a strong engineering background, with experience in security engineering, cloud configurations, and a deep understanding of modern threats. The successful candidate will collaborate with teams across the organization, establishing security processes and driving compliance efforts.

Qualifications

• 3-6 years in security engineering.
• Familiarity with threat modeling and secure code review.
• Hands-on experience with AppSec and container security.

Responsibilities

• Own application security across the product surface.
• Harden cloud and infrastructure.
• Build the security foundation for the agent platform.
• Partner with engineering for security in product design.
• Lead incident response and build playbooks.
• Drive security compliance as the company scales.
• Establish a security culture within the team.

Skills

Application security

Cloud security (AWS/GCP)

Kubernetes hardening

CI/CD pipeline security

Python

Go

TypeScript

Education

BS/MS in Computer Science or equivalent

Job description

Where multiple locations are listed for this role, the position may be based in any of those locations, with priority determined according to the order of listing.

At Simular, we’re building the next generation of computer use agents — AI systems that operate computers exactly as humans do. As our first dedicated security hire in Singapore, you’ll own security end-to-end: hardening the applications our users touch, the infrastructure our agents run on, and the new and evolving attack surface introduced by autonomous AI agents themselves.

This is a hands‑on, builder‑style role. You won’t be writing policy documents from an ivory tower; you’ll be reading code, fixing it, and shipping the tooling that keeps Simular safe as we scale.

What you’ll do

• Own application security across our product surface: threat modeling, secure code review, SAST/DAST, dependency and supply-chain hygiene
• Harden our cloud and infrastructure: AWS/GCP configuration, Kubernetes, secrets management, network boundaries, CI/CD pipeline security
• Build the security foundation for our agent platform: sandboxing, permission boundaries, prompt-injection defenses, data exfiltration controls, and safe tool execution
• Partner with engineering and research to bake security into product design from day zero, not bolted on later
• Run incident response and lead investigations when things go wrong; build the playbooks so the next one is faster
• Drive vendor reviews, customer security questionnaires, and the compliance work needed as we move upmarket (SOC 2, ISO, etc.)
• Establish the security culture: lightweight processes, useful tooling, clear ownership; scrappy, not bureaucratic

You might be a fit if

• You have a BS/MS in Computer Science or equivalent experience, with 3-6 years in security engineering
• You’re a strong engineer first: comfortable shipping code in Python, Go, or TypeScript, not just reviewing others’
• You have hands‑on experience across two or more of: AppSec, cloud security (AWS/GCP), container/Kubernetes hardening, CI/CD security
• You understand modern threat models: supply‑chain attacks, identity and secrets, web app vulnerabilities, infrastructure misconfiguration
• You’re genuinely curious about AI and agent security: how prompt injection works, how to sandbox autonomous tool use, how to reason about data flow in agentic systems
• You thrive as the first security hire: you can prioritize ruthlessly, build from zero, and earn trust by shipping rather than blocking
• Bonus: red-team or offensive security background, experience securing ML/AI pipelines, or prior early-stage startup experience