IT Security Engineer (Automation & AI) – hybrid arrangement

You will strengthen our cybersecurity posture and automate IT and business workflows using Microsoft Power Automate and n8n. You will also lead the safe adoption of AI tools so our staff spend less time on manual, repetitive work. This hands-on role suits someone who is security-minded and enjoys building practical automation.

Cybersecurity

• Set and review security baselines for identity, endpoints and email, and verify that Microsoft 365 controls such as Conditional Access, Intune and Defender for Office 365 policies meet them.
• Manage network security controls and implement or coordinate remediation of security gaps with the IT team and vendors.
• Monitor and triage security alerts, investigate incidents, and lead response, remediation and post-incident reviews.
• Run vulnerability scans, track patching, and conduct phishing simulations and security awareness training.
• Develop and maintain security policies, conduct access reviews and vendor security assessments, and prepare audit evidence.
• Support data breach assessment and notification in line with the Personal Data Protection Act (PDPA).

Automation and AI

• Design, build, test and maintain Power Automate and n8n workflows for onboarding and offboarding, access provisioning, ticket triage, approvals and reporting.
• Integrate workflows with Microsoft 365, Entra ID, our IT service management tool and other systems through REST APIs and webhooks.
• Monitor and support production automations, with error handling, version control and documentation.
• Evaluate and implement AI tools and agents, such as Microsoft 365 Copilot, with guardrails for data security and privacy.
• Develop and maintain guidelines for the safe use of generative AI, covering data classification, licensing and acceptable use.
• Work with departments to identify automation opportunities, assess feasibility and build proofs of concept.
• Train staff to use automation and AI tools securely, and maintain runbooks, templates and reusable components.
• Any other duties as and when assigned.

Requirements

• Diploma or degree in Information Technology, Computer Science, Cybersecurity or a related field, or equivalent practical experience.
• Min 3 years of hands-on IT security experience with at least 3 years of hands-on experience building and supporting production automations in Microsoft Power Automate, and n8n or similar tools.
• Hands-on experience assessing and configuring Microsoft 365 and Entra ID security, including Conditional Access, MFA and Defender for Office 365.
• Scripting in at least one language, such as Python, JavaScript or PowerShell, and integrating systems through REST APIs and web hooks.
• Practical experience evaluating and rolling out generative AI tools for business use, such as Microsoft 365 Copilot, ChatGPT or Claude.
• Hands-on experience integrating LLMs or AIagents with business systems, using Model Context Protocol (MCP) servers, AI agent frameworks or LLM APIs.
• Working knowledge of PDPA obligations for handling personal data in automation and AI workflows.
• Able to document processes clearly and explain technical risks to non-technical staff.