Senior Cloud Security Engineer - AWS & CI/CD Security Lead

Bank Islam Malaysia Berhad; Kuala Lumpur; Sur place; MYR 180 000 - 280 000; Plein temps

Résumé du poste

Bank Islam Malaysia Berhad is seeking a Senior Cloud Security Engineer to safeguard cloud environments, applications and data. You will lead security controls, monitoring and risk management while partnering with Cloud Platform, DevOps and governance teams to embed security across the cloud lifecycle.

You will drive improvements in cloud-security practices, coordinate remediation of incidents, and ensure compliance with internal standards and regulatory obligations.

Qualifications

• Bachelor's degree in IT / Computer Science or related cybersecurity field.
• 7–10 years in IT or Computer Science or cybersecurity, with at least 3 years securing cloud environments, preferably AWS.
• Hands-on experience securing AWS cloud environments: identity, network, workload, data, API, encryption and secrets-management controls.
• Knowledge of AWS security services, centralized logging, threat detection, vulnerability management and incident response.
• Other cloud providers (Azure, GCP, Alibaba) considered.
• Working knowledge of Terraform, AWS CloudFormation, CI/CD security, JSON or YAML, and security automation.
• Understanding of cloud-security frameworks, regulatory requirements and shared responsibility model.
• Ability to assess security risks, investigate cloud-security events and drive remediation to closure.
• Strong analytical, problem-solving, prioritization and stakeholder communication skills.
• Experience in banking or regulated industries is a plus.
• Knowledge of Kubernetes, CNAPP, SIEM, DLP and API security is an advantage.
• Certifications such as AWS Specialty, CISSP, CCSP, CISM or Terraform Associate are pluses.

Responsabilités

• Act as the Subject Matter Expert for the Cloud Security pillar and provide technical guidance for cloud initiatives.
• Define, implement and maintain cloud-security standards, controls and secure configurations.
• Conduct security architecture reviews and risk assessments for cloud services, applications and workloads.
• Secure cloud identities, networks, workloads, data, APIs, encryption keys and secrets.
• Embed security into IaC, CI/CD pipelines and cloud deployment processes.
• Monitor and investigate cloud-security alerts, vulnerabilities, misconfigurations and suspicious activities.
• Take ownership of cloud-security findings and coordinate remediation through closure.
• Drive continuous improvement in cloud-security controls, automation, monitoring and operational processes.
• Support cloud-security incidents, security testing, audits and regulatory assessments.
• Collaborate with Cloud Platform, DevOps, applications, architecture, SOC, risk and governance teams to secure the cloud lifecycle.
• Ensure cloud services comply with security standards, risk requirements and regulatory obligations.
• Maintain cloud-security documentation, runbooks, compliance evidence and stakeholder reporting.

Connaissances

Cloud security

Security risk assessment

Incident response

Stakeholder communication

Ownership & teamwork

Analytical thinking

Formation

Bachelor's Degree in IT / Computer Science or related cybersecurity field

Outils

Terraform

AWS CloudFormation

CI/CD security

JSON

YAML

Kubernetes

Description du poste

Bank Islam Malaysia Berhad is seeking a Senior Cloud Security Engineer to safeguard cloud environments, applications and data. You will lead security controls, monitoring and risk management while partnering with Cloud Platform, DevOps and governance teams to embed security across the cloud lifecycle.

You will drive improvements in cloud-security practices, coordinate remediation of incidents, and ensure compliance with internal standards and regulatory obligations.