Cloud Security Engineer

Position: Cloud Security Engineer

Salary: SGD 7,000 – SGD 10,500 / month (commensurate with experience)

About the Role

Recruit123 is partnering with our client, an established technology-driven organization in Singapore, to hire a Cloud Security Engineer. In this role, you will be responsible for designing, implementing, and maintaining robust security controls across multi-cloud environments, embedding automated security into CI/CD pipelines, and safeguarding modern cloud infrastructure against emerging threats.

Key Responsibilities:

Design, implement, and maintain security baselines and architectural guardrails across public cloud environments (AWS, Azure, or GCP).

Deploy and manage Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), and Cloud Infrastructure Entitlement Management (CIEM) platforms.

Embed DevSecOps practices within CI/CD release pipelines using automated static and dynamic security testing (SAST, DAST, SCA) and container image scanning.

Enforce secure Infrastructure-as-Code (IaC) validation and policy-as-code controls (e.g., Terraform, Open Policy Agent, Checkov, Trivy).

Configure, review, and harden Identity and Access Management (IAM) permissions, applying least-privilege principles, SSO, and secrets management solutions (e.g., HashiCorp Vault, AWS Secrets Manager).

Secure container orchestration platforms and microservices architectures (Docker, Kubernetes / EKS / AKS).

Collaborate with SOC and incident response teams to ensure comprehensive cloud audit logging, telemetry, and alert triage via SIEM solutions (e.g., Splunk, Microsoft Sentinel, Datadog).

Align cloud environments with industry standards and Singapore regulatory requirements (e.g., CIS Benchmarks, MAS TRM Guidelines, ISO/IEC 27001, CSA CCM).

Act as a security subject matter expert to advise software engineering and platform infrastructure teams on cloud threat mitigation.

Requirements

Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.

Minimum 3 to 6 years of direct experience in cloud security engineering, infrastructure security, or DevSecOps.

Proven technical proficiency in at least one major cloud platform (AWS, Microsoft Azure, or GCP).

Hands-on experience securing containerized workloads (Kubernetes, Docker) and configuring network security controls (VPC/VNet peering, Security Groups, WAF, NSGs).

Proficient with scripting and automation tools (e.g., Python, Bash, Go) and CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins).

Recognized certifications are strongly preferred (e.g., AWS Certified Security – Specialty, Azure Security Engineer Associate [AZ-500], CCSP, CCSK, or CISSP).

Good working knowledge of local risk and compliance standards such as MAS TRM or CSA Cloud Security guidelines.

Strong troubleshooting ability and cross-functional communication skills across DevOps and business units.

What’s on Offer:

Competitive monthly base salary ranging from SGD 7,000 to SGD 10,500, tailored to depth of cloud architecture expertise.

Key ownership role driving enterprise cloud modernization and zero-trust initiatives.

Company sponsorship for advanced cloud and security certifications.

Comprehensive medical benefits and flexible hybrid work arrangements.

Recruit123 Pte Ltd

EA Personnel: Lian Cher Chieh (Steffan)

EA Personnel Registration No.: R1217705

EA License No.: 25C2810EA

steffan.lian@recruit-123.com