Cloud Security Engineer

Cloud Security Engineer | Singapore A fast-growing technology company is looking for a hands-on Cloud Security Engineer to own and evolve its cloud security posture across a primarily Microsoft Azure environment, with GCP in the mix. You will be the go-to security engineer, designing controls, building detection capabilities, and securing AI/ML workloads, while using automation and AI tooling to operate with high leverage. What you'll do: Build and tune threat detection across multi-cloud infrastructure (Azure/GCP), covering containers, Kubernetes, IoT/OT, and AI/ML workloads Deploy and operate SIEM/SOAR platforms including AI-assisted detection, triage, and automated response playbooks Govern identity and access for human and non-human identities (service principals, workload identities, AI agents) using Microsoft Entra ID Secure AI/LLM systems against threats such as prompt injection, model exfiltration, and insecure agent permissions Collaborate with cloud infrastructure and platform teams to embed security across the SDLC Maintain and drive the security roadmap aligned to regulatory mandates and customer demands What you'll bring: 5+ years of hands-on cloud security experience with deep Azure expertise (AZ-500 or SC-100 required or strongly preferred) Strong knowledge of IAM/federation protocols (SAML, OAuth 2.0, OIDC) and Microsoft Entra ID Hands-on experience with CSPM/CNAPP tooling (e.g. Microsoft Defender for Cloud) SIEM/SOAR experience including log onboarding and automation development Python scripting and AI-assisted tooling proficiency Working knowledge of AI/LLM security concepts , OWASP Top 10 for LLMs, MITRE ATLAS, or NIST AI RMF GCP Professional Cloud Security Engineer certification is a plus