Cloud Security Engineer

Position: Cloud Security Engineer

Salary: SGD 7,000 – SGD 10,500 / month (commensurate with experience)

About the Role:

Recruit123 is partnering with our client, an established technology-driven organization in Singapore, to hire a Cloud Security Engineer. In this role, you will be responsible for designing, implementing, and maintaining robust security controls across multi-cloud environments, embedding automated security into CI/CD pipelines, and safeguarding modern cloud infrastructure against emerging threats.

Key Responsibilities:

• Design, implement, and maintain security baselines and architectural guardrails across public cloud environments (AWS, Azure, or GCP).

• Deploy and manage Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), and Cloud Infrastructure Entitlement Management (CIEM) platforms.

• Embed DevSecOps practices within CI/CD release pipelines using automated static and dynamic security testing (SAST, DAST, SCA) and container image scanning.

• Enforce secure Infrastructure-as-Code (IaC) validation and policy-as-code controls (e.g., Terraform, Open Policy Agent, Checkov, Trivy).

• Configure, review, and harden Identity and Access Management (IAM) permissions, applying least-privilege principles, SSO, and secrets management solutions (e.g., HashiCorp Vault, AWS Secrets Manager).

• Secure container orchestration platforms and microservices architectures (Docker, Kubernetes / EKS / AKS).

• Collaborate with SOC and incident response teams to ensure comprehensive cloud audit logging, telemetry, and alert triage via SIEM solutions (e.g., Splunk, Microsoft Sentinel, Datadog).

• Align cloud environments with industry standards and Singapore regulatory requirements (e.g., CIS Benchmarks, MAS TRM Guidelines, ISO/IEC 27001, CSA CCM).

• Act as a security subject matter expert to advise software engineering and platform infrastructure teams on cloud threat mitigation.

Requirements:

• Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.

• Minimum 3 to 6 years of direct experience in cloud security engineering, infrastructure security, or DevSecOps.

• Proven technical proficiency in at least one major cloud platform (AWS, Microsoft Azure, or GCP).

• Hands-on experience securing containerized workloads (Kubernetes, Docker) and configuring network security controls (VPC/VNet peering, Security Groups, WAF, NSGs).

• Proficient with scripting and automation tools (e.g., Python, Bash, Go) and CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins).

• Recognized certifications are strongly preferred (e.g., AWS Certified Security – Specialty, Azure Security Engineer Associate [AZ-500], CCSP, CCSK, or CISSP).

• Good working knowledge of local risk and compliance standards such as MAS TRM or CSA Cloud Security guidelines.

• Strong troubleshooting ability and cross-functional communication skills across DevOps and business units.

What’s on Offer:

• Competitive monthly base salary ranging from SGD 7,000 to SGD 10,500, tailored to depth of cloud architecture expertise.

• Key ownership role driving enterprise cloud modernization and zero-trust initiatives.

• Company sponsorship for advanced cloud and security certifications.

• Comprehensive medical benefits and flexible hybrid work arrangements.

Recruit123 Pte Ltd

EA Personnel: Lian Cher Chieh (Steffan)

EA Personnel Registration No.: R1217705

EA License No.: 25C2810EA
steffan.lian@recruit-123.com