Senior Security Engineer - Singapore

Plaud Inc.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

ESOP

High-Impact environment

Cutting-edge AI tools

Top-spec equipment

Team events

Medical insurance

Job summary

Plaud Inc. in Singapore seeks a Senior Security Engineer to own Security Operations, Detection, and Response from scratch.

You will architect the cyber defense, implement Detection-as-Code, and establish incident response playbooks to protect infrastructure and support SOC 2 Type II readiness. You will lead cross-functional IR, automate triage, integrate AI into security workflows, and ensure SLAs for MTTD and MTTR while building telemetry across cloud and endpoints.

Qualifications

• 3+ years hands-on security engineering experience with security operations (SIEM, IR, SOAR, detection engineering, threat hunting).
• Builder mentality: build security infra from zero, no legacy runbooks.
• Strong knowledge of the MITRE ATT&CK framework, custom log source integration, incident severity mapping.
• Extensive experience managing incident response lifecycles and tuning workflows to meet SLAs (MTTD/MTTR).
• Working knowledge of SOC 2 Type II control requirements—specifically CC7 (Monitoring & Detection).
• Experience using LLMs in daily security workflows for alert summarization, rule generation, or automation.

Responsibilities

• Architect, deploy, and manage our core security stack (including SIEM, EDR, and NTA) from zero.
• Author and tune detection rules mapped to MITRE ATT&CK; implement Detection-as-Code.
• Own end-to-end Incident Response lifecycle; act as Incident Commander for critical events; develop automated playbooks.
• Embed AI into security workflows to summarize alerts and generate detection logic.
• Produce continuous evidence package for SOC 2 Type II audit; maintain monitoring and detection domains.

Skills

Security operations

Builder mentality

MITRE ATT&CK

Incident response

SOC 2 Type II

AI in security

Tools

SIEM tooling

EDR tooling

SOAR platforms

Job description

About Plaud Inc.

Plaud is building the real-world AI interface for professionals to amplify intelligence, elevate productivity and performance, loved by over 2,500,000 users worldwide since 2023. With a mission to amplify human intelligence, Plaud captures, structures, and compounds the intelligence generated in conversations — so humans can think better, decide faster, and execute with clarity.

Plaud Inc. is a Delaware-incorporated, San Francisco-based company pushing the boundary of human–AI intelligence through a hardware–software combination. With full ISO 27001, ISO 27701, SOC 2, GDPR, EN18031, and HIPAA compliances, Plaud is committed to the highest standards of data security and privacy protection. To learn more about Plaud, please visit https://www.plaud.ai and follow along on Instagram, X, Facebook, LinkedIn, and YouTube.

Why You Should Join Us

• Plaud is a bootstrapped, skyrocketing, profitable company with a $300M revenue run rate achieved in just three years.
• Define the next-gen paradigm for human-AI interaction.
• Gain exposure to cutting-edge AI for Pro tools and play a direct role in our global expansion.
• Work with passionate teammates who value innovation, collaboration, and customer success.
• Grow your career in a culture that champions continuous learning and fast career development.
• Market-competitive compensation, global exposure, and a vibrant, creativity-fueled work atmosphere.

About the Role

We are looking for a Senior Security Engineer to own our Security Operations, Detection, and Response foundation. This is a builder’s role—you will not be inheriting a mature program or an existing runbook. Instead, you will architect our cyber defense capability from the ground up, author our core detection logic, implement Detection-as-Code (DaC), and establish the incident response playbooks that will protect our infrastructure and ensure our SOC 2 Type II audit readiness.

If you are passionate about building robust cyber defense capabilities, automating routine triage and responses, and leading cross-functional incident response to consistently meet strict SLAs, this is the role for you.

What you will do

• Cyber Defense Capability & Telemetry Integration: Architect, deploy, and manage our core security stack (including but not limited to SIEM, EDR, and NTA) from zero. Establish reliable ingestion pipelines for telemetry spanning cloud environments (AWS/GCP), SaaS applications, and endpoint layers.
• Detection Engineering: Author, deploy, and continuously tune detection rules mapped to the MITRE ATT&CK framework. Focus heavily on maintaining high-fidelity coverage while aggressively reducing false positives and implementing Detection-as-Code practices.
• Incident Response & SOAR: Own the end-to-end IR lifecycle. Act as Incident Commander for critical P1/P2 events, gradually develop automated playbooks across core incident categories, and drive operational execution to consistently meet standard SLAs for Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• AI-Driven SecOps: Embed LLMs directly into the daily security workflow. Utilize AI tools to summarize complex security alerts, generate initial detection rule logic and implement Detection-as-Code, and automate SOAR playbook drafting.
• SOC 2 Type II Operational Evidence: Produce and maintain the continuous evidence package required for our upcoming SOC 2 Type II audit. Own the CC7 (Monitoring & Detection) domain, including log retention standards, alert records, and monthly SecOps performance reporting to leadership.

Skills, qualifications and experience we look for

• Experience: 3+ years of hands‑on security engineering experience with demonstrable depth in security operations (SIEM, IR, SOAR, detection engineering, threat hunting).
• Builder Mentality: Proven ability to build security infrastructure from zero, including tool selection, baseline configuration, and policy definition without relying on legacy runbooks.
• Technical Depth: Strong working knowledge of the MITRE ATT&CK framework, custom log source integration, and incident severity matrix mapping.
• SLA & IR Proficiency: Extensive experience managing incident response lifecycles and tuning workflows to meet strict MTTD/MTTR SLAs.
• Compliance Familiarity: Working knowledge of SOC 2 Type II control requirements—specifically CC7 (Monitoring & Detection)—and the operational evidence standards expected by a third‑party auditor.
• AI Fluency: Routinely uses LLMs (ChatGPT, Claude, etc.) as part of daily security workflows for alert summarization, rule generation, or automation. Note: You will be asked to demo your AI usage from the last two weeks during the interview process.

What we offer

• Meaningful Ownership An Employee Stock Ownership Plan (ESOP) that gives a real stake in Plaud’s long‑term success.
• High-Impact Environment Work in a fast-moving, product-driven environment where your ideas directly shape the future of AI productivity.
• Cutting-Edge AI Tools for Productivity Access to best-in-class AI tools, including Gemini, Claude Code, and other frontier AI systems to maximize engineering and execution efficiency.
• Best-in-Class Equipment Choice of top-spec laptops, high-performance workstation setups, and cutting‑edge Plaud devices for all new hires.
• Team & Culture Annual company offsites, team events, and a culture that values craftsmanship, ownership, and velocity.
• Medical & Insurance Coverage Comprehensive benefits to protect our employees' financial security, physical health, and longterm growth. Medical insurance and WICA coverage for all full‑time employees.

Disclaimer: Plaud is and will continue to be an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristics.