Cloud Security Lead: AWS for Enterprise & Government

Neutron Pte. Ltd.; Kuala Lumpur; On-site; MYR 240,000 - 380,000; Full time

Job summary

Neutron seeks an experienced information security leader in Kuala Lumpur to ensure a confidential business platform is secure by design. You will demonstrate security to a client with high standards and govern secure practices across delivery.

You will own security across the lifecycle, lead threat modelling and architecture reviews for an AWS-based platform, and coordinate VAPT, encryption, logging and incident response for go-live.

Qualifications

• 10+ years in information security and at least 5 years in app/cloud security.
• Hands-on AWS security experience (IAM, KMS, WAF, GuardDuty, etc.).
• Strong knowledge of OWASP Top 10 and ASVS, threat modelling and secure coding.
• Experience leading VAPT cycles and remediation with dev teams.
• Familiar with ISO 27001 / NIST CSF and audit support.
• Professional certifications such as CISSP, CCSP, CISM or AWS Security.

Responsibilities

• Own application and solution security across the delivery lifecycle from design to go-live.
• Lead threat modelling and security architecture reviews for the cloud-native platform on AWS.
• Define and enforce secure development practices (SSDLC) incl. code reviews, SAST/DAST.
• Specify identity access controls: MFA, SSO, RBAC and privileged access.
• Define encryption, key management, secrets handling, logging and monitoring.
• Coordinate vulnerability assessment and penetration testing (VAPT) and remediation.
• Map controls to client security standards and assist audits.
• Collaborate with cloud and DevOps teams on infrastructure security and incident response.

Skills

Information security

AWS security

Threat modelling

Secure coding

VAPT

Audits & compliance

ISO 27001 / NIST CSF

Security certifications

PDPA knowledge

Job description

Neutron seeks an experienced information security leader in Kuala Lumpur to ensure a confidential business platform is secure by design. You will demonstrate security to a client with high standards and govern secure practices across delivery.

You will own security across the lifecycle, lead threat modelling and architecture reviews for an AWS-based platform, and coordinate VAPT, encryption, logging and incident response for go-live.