Security Engineer (Banking, 1-year renewable contract)

Dear Candidate,

If you or someone you know is interested in this position, kindly forward your CV directly to [HIDDEN TEXT] (this method is preferred due to the high volume of applications which may lead to oversight).

Please be aware that visa sponsorship is not currently available.

Primary Responsibilities

• Conduct validation of security controls and effectiveness testing across various cloud platforms and services.
• Design, implement, and sustain cloud security controls in accordance with approved security frameworks and organizational security policies.
• Integrate security-by-design principles throughout cloud infrastructure, applications, and technological implementations.
• Evaluate cloud environments against internal security protocols, security baselines, and regulatory standards, pinpointing compliance deficiencies and potential enhancements.
• Set up and manage cloud-native security services, Identity and Access Management (IAM), monitoring systems, and security automation tools.
• Analyze cloud configurations to detect security vulnerabilities, misconfigurations, compliance gaps, and weaknesses, and initiate necessary remediation actions.
• Work collaboratively with Security Architects and technology teams to interpret security requirements and architectural blueprints into actionable technical controls and operational processes.
• Assist in vulnerability management efforts, including tracking remediation, conducting risk assessments, and validating corrective measures.
• Engage in cloud security risk assessments and propose suitable risk mitigation strategies.
• Perform security control assessments for new cloud services, infrastructure implementations, applications, and technological solutions.
• Create and maintain cloud security standards, procedures, guidelines, and technical documentation.
• Assist in security incident investigations by providing technical expertise during containment, remediation, and follow-up activities.
• Automate security controls, compliance checks, monitoring, and reporting wherever feasible.
• Remain informed about emerging cloud security threats, vulnerabilities, technologies, and industry best practices, advising on improvements to the organization's cloud security stance.

Essential Qualifications

• 3-7 years of experience in Cloud Security, Cybersecurity, Infrastructure Security, or a similar security engineering position.
• In-depth knowledge of cloud security principles, architectures, and controls, particularly in Google Cloud Platform (GCP) and/or Microsoft Azure.
• Proven hands-on experience in implementing, configuring, and validating cloud security controls.
• Strong expertise in cloud-native security services, IAM, network security, encryption, logging, monitoring, and security operations.
• Solid understanding of security frameworks and standards such as the NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.
• Experience in vulnerability management, security evaluations, configuration assessments, and using security assessment tools.
• Hands-on experience with Infrastructure as Code (IaC) and familiarity with DevSecOps principles, particularly in integrating security into CI/CD pipelines.
• Experience in cloud security automation, compliance oversight, or security tools is advantageous.
• Excellent analytical, problem-solving, troubleshooting, and security risk assessment capabilities.
• Ability to evaluate technical security findings, assess their business implications, and suggest suitable remediation strategies.
• Strong communication and documentation skills, capable of effectively conveying security risks and technical insights to both technical and non-technical audiences.