Senior Cloud Security Engineer

About the Team

We are part of Bank Islam’s technology & transformation organization, responsible for enabling secure, innovative and customer-focused banking experiences. Our multidisciplinary team works across cloud, cybersecurity, engineering, data and digital platforms to deliver resilient and trusted services that support the Bank’s digital ambitions.

We place customers at the centre of our work, embrace new technologies and continuously improve how banking services are designed, secured and delivered. We are committed to creating positive and sustainable impact for the economy, community and environment while fulfilling the objectives of Shariah.

Our work is guided by four core values: thinking customers first, acting with integrity, advancing beyond expectations and taking full ownership of our mandate.

Primary Functions:

The Senior Cloud Security Engineer is responsible for protecting the Bank’s cloud environments, applications and data through effective security controls, monitoring and risk management.

The role acts as the Subject Matter Expert for the Cloud Security pillar, providing technical guidance and working with Cloud Platform, DevOps, application, architecture, SOC, risk and governance teams to embed security throughout the cloud lifecycle. The role also drives continuous improvement initiatives, investigates cloud-security risks and events, coordinates remediation to closure, and ensures compliance with the Bank’s security standards and applicable regulatory requirements.

Duties and Responsibilities

• Act as the Subject Matter Expert for the Cloud Security pillar and provide technical guidance for cloud initiatives.

• Define, implement and maintain cloud-security standards, controls and secure configuration requirements.

• Conduct security architecture reviews and risk assessments for cloud services, applications and workloads.

• Secure cloud identities, networks, workloads, data, APIs, encryption keys and secrets.

• Embed security into Infrastructure as Code, CI/CD pipelines and cloud deployment processes.

• Monitor and investigate cloud-security alerts, vulnerabilities, misconfigurations and suspicious activities.

• Take ownership of cloud-security findings and coordinate remediation, tracking and validation through closure.

• Drive continuous improvement in cloud-security controls, automation, monitoring and operational processes.

• Support cloud-security incidents, security testing, audits and regulatory assessments.

• Work with Cloud Platform, DevOps, application, architecture, SOC, risk and governance teams to embed security throughout the cloud lifecycle.

• Ensure cloud services comply with the Bank’s security standards, risk requirements and applicable regulatory obligations.

• Maintain cloud-security documentation, operational runbooks, compliance evidence and stakeholder reporting.

Requirements:

• Bachelor’s Degree in Information Technology / Computer Sciene or any related cybersecurity field.

• 7 - 10 years of experience in IT or Computer Science or cybersecurity, with at least 3 years of hands-on experience securing cloud environments, preferably AWS.

• Strong hands-on experience securing AWS cloud environments, including identity, network, workload, data, API, encryption and secrets-management controls.

• Practical knowledge of AWS security services, centralized logging, threat detection, vulnerability management and incident response.

• Other Cloud Service Provider i.e Azure, GCP, Alibaba shall be considered.

• Working knowledge of Terraform, AWS CloudFormation, CI/CD security, JSON or YAML, and security automation.

• Understanding of cloud-security frameworks, regulatory requirements and the cloud shared responsibility model.

• Ability to assess security risks, investigate cloud-security events and drive remediation to validated closure.

• Strong analytical, problem-solving, prioritization and stakeholder communication skills.

• Demonstrated ownership, integrity, teamwork and ability to work independently.

• Experience in banking, financial services or another regulated industry is an advantage.

• Knowledge of Kubernetes, CNAPP, SIEM, DLP and API security is an advantage.

• Relevant certifications such as AWS Certification Specialty, CISSP, CCSP, CISM or Terraform Associate are added advantage