Security Engineer, Banking (1-year renewable contract)

Dear Candidate,

If you or a colleague may be interested, kindly forward your CV directly to [HIDDEN TEXT]

(this is preferred due to the high volume of applications, which may cause some CVs to be overlooked).

Please be aware that visa sponsorship is currently not available.

Job Description

Conduct validation and effectiveness testing of security controls across various cloud platforms and services.

Design, implement, and uphold cloud security measures in accordance with approved security architecture frameworks.

.

Assist in the application of security-by-design principles within cloud infrastructure and applications.

.

Evaluate cloud environments to ensure compliance with internal security policies, security baselines, and regulatory guidelines.

.

Configure and oversee cloud-native security services, monitoring tools, and automation solutions.

.

Examine cloud configurations to identify security vulnerabilities, misconfigurations, and areas of non-compliance.

.

Work closely with Security Architects to convert security requirements into actionable technical controls and operational procedures.

.

Contribute to vulnerability management initiatives, including the tracking of remediation efforts and validation of corrective measures.

.

Engage in cloud security risk assessments and propose strategies for risk mitigation.

.

Carry out security control reviews for new cloud services, infrastructure setups, and technology deployments.

.

Create security standards, procedures, and technical documentation associated with cloud security.

.

Assist in security incident investigations, providing technical insight during containment and remediation processes.

.

Automate security evaluations, compliance monitoring, and reporting wherever feasible.

.

Stay abreast of emerging cloud security threats, vulnerabilities, and industry best practices, suggesting enhancements as required.

3-7 years of experience in cloud security, cybersecurity, or infrastructure security roles.

## RESTRICTED ##

.

In-depth knowledge of cloud security principles and architectures, particularly within Google Cloud Platform or Azure.

.

Experience in the implementation and validation of cloud security controls.

.

Familiarity with cloud-native security services, Identity and Access Management (IAM), network security, encryption, logging, and monitoring technologies.

.

Understanding of security frameworks and standards such as the NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.

.

Experience with vulnerability management and security assessment tools.

.

Skilled in developing Infrastructure as Code (IaC) and knowledgeable about DevSecOps security practices.

.

Strong analytical, problem-solving, and troubleshooting capabilities.

.

Ability to document technical findings and communicate security risks clearly to both technical and non-technical audiences.