Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Reap

AI Security Engineer

Reap

. Deploy and operationalize Microsoft Defender for Cloud Apps (CASB) .

Posted 10/7/2026full-timeHong KongMid-LevelSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in deploying and operationalizing Microsoft Defender for Cloud Apps, configuring DLP policies, and managing shadow IT reporting. Proficient in writing SIEM detection rules and assessing AI vendor security postures to ensure compliance with data protection regulations.

Highest-signal resume keywords
Microsoft Defender For Cloud Apps DeploymentDLP Policy Authoring Using Microsoft PurviewSIEM Detection Rule-Writing Using KQLShadow IT Discovery ConfigurationAI Vendor Security Assessment

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
CASB DeploymentDLP Policy ConfigurationSensitive Data Pattern DefinitionData Leakage Incident ResponseBulk Snowflake Access DetectionAI Platform Data HandlingZero-Retention Enterprise DPA KnowledgeAPI Security FundamentalsGDPR Article 28 CompliancePrompt Injection Detection
Tools & Technologies
Microsoft PurviewOkta SSOSnowflakeNetskopeZscalerSIEM ToolsCloud Environments
Certifications & Qualifications
Microsoft SC-400CCSP
Industry Keywords
Shadow ITData Loss PreventionAI Platform ComplianceData Protection RegulationsThird-Party ICT Risk Requirements

Tech Stack

Tools & technologies
AWSCloud

About the role

Key responsibilities & impact
  • Deploy and operationalize Microsoft Defender for Cloud Apps (CASB)
  • Configure app discovery, shadow IT reporting, session controls, and data upload blocking for unsanctioned AI platforms
  • Build and maintain DLP policies for AI platform data submission
  • Define sensitive data patterns including PAN, IBAN, account numbers, and customer identity fields
  • Enforce blocking rules across CASB, Microsoft Purview, and endpoint DLP
  • Write SIEM detection rules for AI-related data leakage
  • Detect bulk Snowflake exports followed by AI platform uploads and anomalous SaaS upload volumes
  • Own technical onboarding of approved enterprise AI tools, including zero data retention, no model training on Reap data, audit logging, and Okta SSO integration
  • Maintain the shadow AI inventory and classify tools against the company risk framework
  • Report the shadow AI inventory monthly to the CISO
  • Own prompt injection detection and prevention for AI-integrated products and internal tools
  • Assess AI vendor security posture, including data retention, subprocessors, DPA coverage, and data handling
  • Build and own the AI data leakage incident response playbook
  • Partner with Engineering, Risk, and Operations to support secure global financial connectivity

Requirements

What you’ll need
  • Hands-on CASB deployment experience with Microsoft Defender for Cloud Apps, Netskope, or Zscaler
  • Experience configuring shadow IT discovery and data upload controls
  • Experience authoring DLP policies using Microsoft Purview or equivalent
  • Experience building sensitive information types, tuning false positive rates, and enforcing effective policies
  • Understanding of how OpenAI, Anthropic, and Google AI platforms handle data
  • Knowledge of zero-retention enterprise DPAs and how to verify compliance
  • SIEM detection rule-writing experience using KQL or equivalent
  • Ability to detect bulk Snowflake access followed by uploads to consumer AI domains within a defined time window
  • AWS security fundamentals, including IAM, network controls, and API Gateway security
  • Understanding of AI API calls through cloud environments
  • Knowledge of GDPR Article 28 and AI platform DPA implications
  • Nice to have: Microsoft SC-400 or CCSP certification
  • Nice to have: prompt injection attack and defense experience
  • Nice to have: PDPA or PDPO familiarity
  • Nice to have: DORA third-party ICT risk requirements
  • Nice to have: prior AI-related data incident response experience

Benefits

Comp & perks
  • Annual leave
  • Public holidays
  • Health insurance budget
  • Flexible remote work options
  • Home office equipment budget
  • Corporate Reap Card with no out-of-pocket spending
  • Vibrant, inclusive work culture
  • Opportunity to work as part of a fast-growing global team