Senior Security Engineer - Singapore

Plaud is building the real-world AI interface for professionals to amplify intelligence, elevate productivity and performance, loved by over 2,500,000 users worldwide since 2023. With a mission to amplify human intelligence, Plaud captures, structures, and compounds the intelligence generated in conversations — so humans can think better, decide faster, and execute with clarity.

Plaud Inc. is a Delaware-incorporated, San Francisco-based company pushing the boundary of human–AI intelligence through a hardware–software combination. With full ISO 27001, ISO 27701, SOC 2, GDPR, EN18031, and HIPAA compliances, Plaud is committed to the highest standards of data security and privacy protection. To learn more about Plaud, please visit https://www.plaud.ai and follow along on Instagram, X, Facebook, LinkedIn, and YouTube.

Plaud is building the next generation intelligence infrastructure and interfaces to capture, extract, and utilize intelligence from what people say, hear, see, and think.

• Plaud is a bootstrapped, skyrocketing, profitable company with a $300M revenue run rate achieved in just three years.

• Define the next-gen paradigm for human-AI interaction.

• Gain exposure to cutting-edge AI for Pro tools and play a direct role in our global expansion.

• Work with passionate teammates who value innovation, collaboration, and customer success.

• Grow your career in a culture that champions continuous learning and fast career development.

• Market-competitive compensation, global exposure, and a vibrant, creativity-fueled work atmosphere.

• Cyber Defense Capability & Telemetry Integration: Architect, deploy, and manage our core security stack (including but not limited to SIEM, EDR, and NTA) from zero. Establish reliable ingestion pipelines for telemetry spanning cloud environments (AWS/GCP), SaaS applications, and endpoint layers.

• Detection Engineering: Author, deploy, and continuously tune detection rules mapped to the MITRE ATT&CK framework. Focus heavily on maintaining high-fidelity coverage while aggressively reducing false positives and implementing Detection-as-Code practices.

• Incident Response & SOAR: Own the end-to-end IR lifecycle. Act as Incident Commander for critical P1/P2 events, gradually develop automated playbooks across core incident categories, and drive operational execution to consistently meet standard SLAs for Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).

• AI-Driven SecOps: Embed LLMs directly into the daily security workflow. Utilize AI tools to summarize complex security alerts, generate initial detection rule logic and implement Detection-as-Code, and automate SOAR playbook drafting.

• SOC 2 Type II Operational Evidence: Produce and maintain the continuous evidence package required for our upcoming SOC 2 Type II audit. Own the CC7 (Monitoring & Detection) domain, including log retention standards, alert records, and monthly SecOps performance reporting to leadership.

• Experience: 3+ years of hands-on security engineering experience with demonstrable depth in security operations (SIEM, IR, SOAR, detection engineering, threat hunting).

• Builder Mentality: Proven ability to build security infrastructure from zero, including tool selection, baseline configuration, and policy definition without relying on legacy runbooks.

• Technical Depth: Strong working knowledge of the MITRE ATT&CK framework, custom log source integration, and incident severity matrix mapping.

• SLA & IR Proficiency: Extensive experience managing incident response lifecycles and tuning workflows to meet strict MTTD/MTTR SLAs.

• Compliance Familiarity: Working knowledge of SOC 2 Type II control requirements—specifically CC7 (Monitoring & Detection)—and the operational evidence standards expected by a third-party auditor.

• AI Fluency: Routinely uses LLMs (ChatGPT, Claude, etc.) as part of daily security workflows for alert summarization, rule generation, or automation. Note: You will be asked to demo your AI usage from the last two weeks during the interview process.