Plaud - Senior Security Engineer - Singapore

• Cyber Defense Capability & Telemetry Integration: Architect, deploy, and manage our core security stack (including but not limited to SIEM, EDR, and NTA) from zero. Establish reliable ingestion pipelines for telemetry spanning cloud environments (AWS/GCP), SaaS applications, and endpoint layers. • Detection Engineering: Author, deploy, and continuously tune detection rules mapped to the MITRE ATT&CK framework. Focus heavily on maintaining high-fidelity coverage while aggressively reducing false positives and implementing Detection-as-Code practices. • Incident Response & SOAR: Own the end-to-end IR lifecycle. Act as Incident Commander for critical P1/P2 events, gradually develop automated playbooks across core incident categories, and drive operational execution to consistently meet standard SLAs for Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). • AI-Driven SecOps: Embed LLMs directly into the daily security workflow. Utilize AI tools to summarize complex security alerts, generate initial detection rule logic and implement Detection-as-Code, and automate SOAR playbook drafting. • SOC 2 Type II Operational Evidence: Produce and maintain the continuous evidence package required for our upcoming SOC 2 Type II audit. Own the CC7 (Monitoring & Detection) domain, including log retention standards, alert records, and monthly SecOps performance reporting to leadership. • Skills, qualifications and experience we look for • Experience: 3+ years of hands-on security engineering experience with demonstrable depth in security operations (SIEM, IR, SOAR, detection engineering, threat hunting). • Builder Mentality: Proven ability to build security infrastructure from zero, including tool selection, baseline configuration, and policy definition without relying on legacy runbooks. • Technical Depth: Strong working knowledge of the MITRE ATT&CK framework, custom log source integration, and incident severity matrix mapping. • SLA & IR Proficiency: Extensive experience managing incident response lifecycles and tuning workflows to meet strict MTTD/MTTR SLAs. • Compliance Familiarity: Working knowledge of SOC 2 Type II control requirements—specifically CC7 (Monitoring & Detection)—and the operational evidence standards expected by a third-party auditor. • AI Fluency: Routinely uses LLMs (ChatGPT, Claude, etc.) as part of daily security workflows for alert summarization, rule generation, or automation. Note: You will be asked to demo your AI usage from the last two weeks during the interview process.