Cloud Vulnerability Management & DevSecOps

Tentacle Tech; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Tentacle Tech in Malaysia is seeking an experienced Cloud Vulnerability Management & DevSecOps professional to strengthen cloud security in a leading finance sector environment. You will own end-to-end vulnerability management across Azure and AWS, lead cloud penetration testing engagements, and embed security controls into CI/CD pipelines.

You will mentor junior testers, advise cross-functional teams, and help elevate the organisation's cloud security posture through dashboards and

Qualifications

• Experience in penetration testing, with 5+ years overall.
• 2–3 years focused on cloud platforms (AWS, Azure, GCP).
• Hands-on with cloud infrastructure assessment and misconfiguration exploitation.

Responsibilities

• Manage end-to-end vulnerability management for Azure and AWS environments
• Coordinate remediation with Cloud, DevOps, and application teams
• Integrate security controls into CI/CD pipelines including SAST, DAST, SCA, secrets scanning, container and IaC scanning
• Lead cloud penetration testing and red teaming engagements across AWS, Azure, and GCP
• Support software supply chain security including SBOMs, provenance, code signing, and opensource governance
• Produce dashboards and metrics on cloud vulnerability risk and DevSecOps maturity
• Mentor and coach junior penetration testers while collaborating with Security Operations, Risk, and Engineering teams

Skills

Penetration testing

Cloud platforms

CI/CD tooling

IAM & cloud networking

Offensive security tools

Education

Bachelor's degree in Computer Science / Information Security

Tools

Jenkins

GitLab CI

GitHub Actions

CircleCI

Pacu

ScoutSuite

Prowler

Burp Suite

Job description

Cloud Vulnerability Management & DevSecOps

Tentacle Tech is an IT and software development consulting company serving some of Malaysia's largest enterprises. We deliver technology solutions, software development services, and IT consulting across multiple industries. We are looking for a talented professional to join our growing team.

The Role

We are seeking an experienced Cloud Vulnerability Management & DevSecOps professional to strengthen cloud security operations within a leading finance sector environment. In this role, you will take ownership of end-to-end vulnerability management across Azure and AWS, lead cloud penetration testing engagements, and embed security controls into CI/CD pipelines, all while mentoring junior team members and advising cross-functional stakeholders on strengthening the organisation's overall cloud security posture.

What You'll Do

• Manage end-to-end vulnerability management for Azure and AWS environments
• Perform risk-based prioritization and coordinate remediation with Cloud, DevOps, and application teams
• Integrate security controls into CI/CD pipelines including SAST, DAST, SCA, secrets scanning, container and IaC scanning
• Lead cloud penetration testing and red teaming engagements across AWS, Azure, and GCP
• Support software supply chain security including SBOMs, provenance, code signing, and opensource governance
• Produce dashboards and metrics on cloud vulnerability risk and DevSecOps maturity
• Mentor and coach junior penetration testers while collaborating with Security Operations, Risk, and Engineering teams

What We're Looking For

• Bachelor's Degree in Computer Science, Information Security, Cybersecurity, or related technical field
• Minimum 5 years of experience in penetration testing, with 2–3 years focused on cloud platforms (AWS, Azure, GCP)
• Proven experience in cloud infrastructure penetration testing, misconfiguration exploitation, and offensive tool development
• Hands-on experience with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, or CircleCI
• Strong knowledge of IAM, cloud networking, containers, and offensive security tools (Pacu, ScoutSuite, Prowler, Burp Suite)
• Experience in regulated environments such as banking or finance is highly advantageous
• Strong communication, leadership, and mentoring abilities

What We Offer

• Opportunity to work on high-impact projects within the finance sector
• Mentorship and structured career progression
• Supportive and collaborative team environment
• Continuous learning and exposure to cutting-edge cloud security practices

Tentacle Technologies was founded in November 2001 with humble beginnings. Headquartered in Malaysia, today we operate in countries like Singapore, India and the Philippines. Our core services are Business Consulting, Software Development, Quality Assurance & IT solutions in Digital Transformation. We are techies with the right techniques to revamp businesses!

Unlike most of the tech companies that have been around since 2000’s, Tentacle Technologies understands the evolution of technology and accepts it as an integral part of future businesses. Our journey started sixteen years ago and our passion for technology has created a positive impact. From what started as a small team, we have grown to a team of 350 employees globally.

A dozen years in business, never lost a client, 350+ technology professional on board, more than 100 client partnerships, do we have to say more?

Tentacle Technologies was founded in November 2001 with humble beginnings. Headquartered in Malaysia, today we operate in countries like Singapore, India and the Philippines. Our core services are Business Consulting, Software Development, Quality Assurance & IT solutions in Digital Transformation. We are techies with the right techniques to revamp businesses!

Unlike most of the tech companies that have been around since 2000’s, Tentacle Technologies understands the evolution of technology and accepts it as an integral part of future businesses. Our journey started sixteen years ago and our passion for technology has created a positive impact. From what started as a small team, we have grown to a team of 350 employees globally.

A dozen years in business, never lost a client, 350+ technology professional on board, more than 100 client partnerships, do we have to say more?