Security Engineer (Banking, 1-year renewable contract)

Dear Applicant,

If you or someone you know is interested, please send the CV directly to quynh.nguyen@evolutionjobs.sg (most preferred, as I may overlook some CVs due to the high volume).

Please note that visa sponsorship is not available at this time.

Key Responsibilities

Perform security control validation and effectiveness testing across cloud platforms and services.

Develop, implement, and maintain cloud security controls in alignment with approved security architecture and organisational security standards.

Apply security-by-design principles across cloud infrastructure, applications, and technology implementations.

Assess cloud environments against internal security policies, security baselines, and regulatory requirements, identifying compliance gaps and areas for improvement.

Configure and manage cloud-native security services, IAM, monitoring capabilities, and security automation tools.

Review cloud configurations to identify security weaknesses, misconfigurations, vulnerabilities, and compliance gaps, and drive appropriate remediation.

Collaborate with Security Architects and technology teams to translate security requirements and architectural designs into practical technical controls and operational procedures.

Support vulnerability management activities, including remediation tracking, risk assessment, and validation of corrective actions.

Participate in cloud security risk assessments and recommend appropriate risk mitigation measures.

Conduct security control reviews for new cloud services, infrastructure deployments, applications, and technology implementations.

Develop and maintain cloud security standards, procedures, guidelines, and technical documentation.

Support security incident investigations, providing technical expertise during containment, remediation, and post-incident activities.

Automate security controls, compliance checks, monitoring, and reporting where practical.

Stay up to date with emerging cloud security threats, vulnerabilities, technologies, and industry best practices, recommending improvements to the organisation's cloud security posture.

Key Requirements

3–7 years of experience in Cloud Security, Cybersecurity, Infrastructure Security, or a related security engineering role.

Strong understanding of cloud security principles, architectures, and security controls across Google Cloud Platform (GCP) and/or Microsoft Azure.

Hands-on experience implementing, configuring, and validating cloud security controls.

Strong knowledge of cloud-native security services, IAM, network security, encryption, logging, monitoring, and security operations.

Good understanding of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.

Experience with vulnerability management, security assessments, configuration reviews, and security assessment tools.

Hands-on experience with Infrastructure as Code (IaC) and familiarity with DevSecOps and integrating security into CI/CD pipelines.

Experience with cloud security automation, compliance monitoring, or security tooling is an advantage.

Strong analytical, problem-solving, troubleshooting, and security risk assessment skills.

Ability to analyse technical security findings, assess their business impact, and recommend appropriate remediation.

Strong communication and documentation skills, with the ability to clearly communicate security risks and technical findings to both technical and non-technical stakeholders.