Lead Cloud Security Engineer at Dyson

Singapore, Singapore, Singapore -

Full Time

Start Date

Immediate

Expiry Date

12 Mar, 26

Salary

0.0

Posted On

12 Dec, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cloud Security, IoT, AWS, C#, Node.js, Python, SAST, SCA, CSPM, CNAPP, Cyber Risk Management, Vulnerability Management, Web Application Firewalls, Public Key Infrastructure, Data Privacy, Cybersecurity Frameworks

Industry

electrical;Appliances;and Electronics Manufacturing

Description

About us Internet connected and smart home products are growing areas for Dyson where we aim to continue our reputation of being innovative and disruptive. Since our first launch of products in connected space, we have grown fast to several millions of connected machines, and we are envisioning a steep growth in 2026 and beyond both in scale and connected features. We want to build reliable, scalable, and secure services and features to support these increasing demands with innovative and competitive technologies in IoT, Machine Data Lake, Data Analytics and Machine Learning to support our vision. We have a ‘You build it, you run it’ ethos and run all our services within Amazon Web Services (AWS). Our teams are responsible for the architecture, development, testing, and operational support of their services in all environments. We are a global department with teams located in the UK, Singapore, and China and we encourage flexible, independent, and innovative thinking in our engineers to deliver solutions. We’re building world-class cross functional Agile teams to deliver our ambitious vision in the connected space. If you thrive on working in a collaborative, stimulating, dynamic environment and relish difficult software engineering challenges then we’d like to speak to you! About the role As a Lead Cloud Security Engineer in the Connected Cloud department, you’ll collaborate with cloud development teams and engineers to secure our cloud native IoT platform, associated tooling, and deployed cloud services. In addition, you will explore innovative ways to improve our overall security posture and deal with common security challenges presented by our cloud workloads. We primarily leverage AWS to host and secure our services, along with: Cloudflare to protect our public facing endpoints Azure DevOps for CI/CD orchestration AWS OpenSearch/ELK, Grafana for application monitoring Palo Alto Prisma Cloud for compliance monitoring and adherence with cloud best practices Veracode for SAST/SCA for scanning our cloud microservices and containers C#, Node.js, and Python to create our services What you’ll be doing: Responsible for promoting good security hygiene and best practices Defining security requirements, guidelines and policies for our engineers, platforms, tooling and services Working alongside our Cloud teams supporting, assisting and advising how to design and build secure services and platforms Identifying and assessing our security risks, threats and vulnerabilities and provide a pragmatic approach for applying mitigation where necessary Advocating a shifting left mentality to ensure possible threats or security issues are addressed early within the development cycle Working with the wider software teams to design and improve the security of our current and future products Ensuring we comply with regulatory requirements and Dyson security standards Identifying new technologies, tools, and approaches to help continually improve our security standards and quality Act as point of contact for any security related queries or issues and educate our engineers in security best practices Investigate and mitigate security incidents and bug bounty escalations What you need: Experienced in application security workflows in public cloud providers (e.g. AWS) Some level of coding experience (in any language) Experienced in security tools for software development: SCA, SAST, CSPM, CNAPP, and secrets management. Experienced in cyber risk and vulnerability management for cloud native workloads, common web-based connectivity for IoT and mobile devices Experienced with supporting audit activities hosted by internal or external parties. Working knowledge of Web Application Firewalls, ideally Cloudflare. Working knowledge of Public Key Infrastructure and related operation activities Working knowledge of data privacy frameworks/regulations like EU’s GDPR & EU CRA, specifically the responsibilities of a cloud service provider for mobile apps & IoT devices. Working knowledge in cybersecurity frameworks like CIS or NIST. Please apply if you: Think this sounds fun Want to help drive security to the left Like resolving complicated problems Have experience with some of our technologies and tools Have a background in either software development or securing solutions Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity. At Dyson we are focused on solving the problems that others have ignored; solving them first using our technology and ingenuity. In order to achieve this we need to pioneer technologies that are different and authentic. This is the core of what we do and who we are. We must strive to create the future, every single day by developing new things, different things, things that go against the grain with a diverse and global team of ingenious minds. Dyson employs 14,000 people and is present in more than 80 countries. And while we are growing fast we want Dyson to remain a start-up in spirit with the freedom of experimentation and learning, constantly reinventing our products as well as reinventing how we work, how we sell and how we support our owners. At the same time we are working through the James Dyson Foundation, James Dyson Award and Dyson Institute to inspire future engineers and pioneering a new approach to engineering education. Underlining everything we do in this diverse environment is the need to always show respect, supporting each other as one team to overcome whatever challenges we encounter. We drive empowerment, development and equality in an inclusive environment for our people around the world. The future doesn’t just happen, we look to make it happen, to achieve leaps through pioneering new ideas.

Responsibilities

As a Lead Cloud Security Engineer, you will secure the cloud native IoT platform and associated tooling while promoting good security hygiene. You will also identify security risks and advocate for early threat mitigation within the development cycle.