Cloud Security Engineer

Cloud Security Engineer | Singapore

A fast-growing technology company is looking for a hands-on Cloud Security Engineer to own and evolve its cloud security posture across a primarily Microsoft Azure environment, with GCP in the mix. You will be the go-to security engineer, designing controls, building detection capabilities, and securing AI/ML workloads, while using automation and AI tooling to operate with high leverage.

What you'll do:

• Build and tune threat detection across multi-cloud infrastructure (Azure/GCP), covering containers, Kubernetes, IoT/OT, and AI/ML workloads
• Deploy and operate SIEM/SOAR platforms including AI-assisted detection, triage, and automated response playbooks
• Govern identity and access for human and non-human identities (service principals, workload identities, AI agents) using Microsoft Entra ID
• Secure AI/LLM systems against threats such as prompt injection, model exfiltration, and insecure agent permissions
• Collaborate with cloud infrastructure and platform teams to embed security across the SDLC
• Maintain and drive the security roadmap aligned to regulatory mandates and customer demands

What you'll bring:

• 5+ years of hands-on cloud security experience with deep Azure expertise (AZ-500 or SC-100 required or strongly preferred)
• Strong knowledge of IAM/federation protocols (SAML, OAuth 2.0, OIDC) and Microsoft Entra ID
• Hands-on experience with CSPM/CNAPP tooling (e.g. Microsoft Defender for Cloud)
• SIEM/SOAR experience including log onboarding and automation development
• Python scripting and AI-assisted tooling proficiency
• Working knowledge of AI/LLM security concepts , OWASP Top 10 for LLMs, MITRE ATLAS, or NIST AI RMF
• GCP Professional Cloud Security Engineer certification is a plus