Security Engineer

About the role

At Simular we are building the next generation of computer‑use agents – AI systems that operate computers exactly as humans do. As the first dedicated security hire in Singapore, you will own security end‑to‑end, hardening the applications our users touch, the cloud infrastructure our agents run on, and the emerging attack surface introduced by autonomous AI agents.

Key responsibilities

• Own application security across the product surface: threat modeling, secure code review, SAST/DAST, and supply‑chain hygiene.
• Harden cloud and infrastructure: AWS/GCP configuration, Kubernetes hardening, secrets management, network boundaries, and CI/CD pipeline security.
• Build the security foundation for the agent platform: sandboxing, permission boundaries, prompt‑injection defenses, data‑exfiltration controls, and safe tool execution.
• Partner with engineering and research to embed security from day zero.
• Run incident response, lead investigations and create playbooks for faster future response.
• Drive vendor reviews, answer customer security questionnaires and support compliance work (SOC 2, ISO, etc.).
• Establish a lightweight security culture with useful tooling and clear ownership.

Required profile

• BS/MS in Computer Science or equivalent with 3‑6 years of security engineering experience.
• Strong engineering mindset: comfortable shipping code in Python, Go or TypeScript.
• Hands‑on experience in at least two areas such as AppSec, cloud security (AWS/GCP), container/Kubernetes hardening, or CI/CD security.
• Deep understanding of modern threat models including supply‑chain attacks, identity/secrets leakage, web‑app vulnerabilities and infrastructure misconfiguration.
• Curiosity about AI and agent security, especially prompt‑injection, sandboxing autonomous tools and data‑flow reasoning.
• Ability to prioritize ruthlessly, build security from scratch and earn trust by delivering solutions.
• Bonus: red‑team/offensive security background, experience securing ML/AI pipelines, or early‑stage startup experience.

Required skills

• Python
• Go
• TypeScript
• AWS
• GCP
• Kubernetes
• CI/CD
• SAST
• DAST