Senior Cloud Vulnerability & DevSecOps Engineer

Randstad Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Randstad Malaysia represents a major financial institution seeking a Senior Cloud Vulnerability Management & DevSecOps expert. The role combines cloud penetration testing, offensive security, and vulnerability management to strengthen cloud security across AWS, Azure and GCP.

You will drive remediation, embed security controls into CI/CD pipelines, and mentor junior testers while collaborating with Cloud Engineering, Security Operations and architecture teams.

Qualifications

• Minimum 5 years of experience in penetration testing with 2–3 years in cloud platforms (AWS/Azure/GCP).
• Hands-on cloud security testing and vulnerability management experience.
• Bachelor Degree or equivalent in a relevant field.

Responsibilities

• Lead and perform cloud penetration testing across AWS, Azure and GCP.
• Identify misconfigurations, vulnerabilities and privilege escalation paths in cloud environments.
• Manage end-to-end Cloud Vulnerability Management including remediation tracking.
• Develop cloud security assessment methodologies and advise on improvements.
• Integrate security controls into CI/CD pipelines (SAST/DAST/SCA, IaC scanning).
• Support DevSecOps and software supply-chain security including SBOM and code signing.
• Assess security across IAM, networking, compute, containers/Kubernetes and logging.
• Collaborate with Cloud Engineering, Security Ops and remediation teams.
• Develop scripts/tools in Python, Bash or PowerShell as needed.
• Produce vulnerability dashboards and executive reports for stakeholders.
• Mentor junior testers and contribute to knowledge sharing.

Skills

cloud security

VAPT

DevSecOps

Education

Bachelor Degree

Tools

Pacu

ScoutSuite

Prowler

Burp Suite

Nmap

Job description

Randstad Malaysia represents a major financial institution seeking a Senior Cloud Vulnerability Management & DevSecOps expert. The role combines cloud penetration testing, offensive security, and vulnerability management to strengthen cloud security across AWS, Azure and GCP.

You will drive remediation, embed security controls into CI/CD pipelines, and mentor junior testers while collaborating with Cloud Engineering, Security Operations and architecture teams.