Senior Cloud Vulnerability & DevSecOps Lead

Tentacle Tech; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Tentacle Tech in Malaysia is seeking an experienced Cloud Vulnerability Management & DevSecOps professional to strengthen cloud security in a leading finance sector environment. You will own end-to-end vulnerability management across Azure and AWS, lead cloud penetration testing engagements, and embed security controls into CI/CD pipelines.

You will mentor junior testers, advise cross-functional teams, and help elevate the organisation's cloud security posture through dashboards and

Qualifications

• Experience in penetration testing, with 5+ years overall.
• 2–3 years focused on cloud platforms (AWS, Azure, GCP).
• Hands-on with cloud infrastructure assessment and misconfiguration exploitation.

Responsibilities

• Manage end-to-end vulnerability management for Azure and AWS environments
• Coordinate remediation with Cloud, DevOps, and application teams
• Integrate security controls into CI/CD pipelines including SAST, DAST, SCA, secrets scanning, container and IaC scanning
• Lead cloud penetration testing and red teaming engagements across AWS, Azure, and GCP
• Support software supply chain security including SBOMs, provenance, code signing, and opensource governance
• Produce dashboards and metrics on cloud vulnerability risk and DevSecOps maturity
• Mentor and coach junior penetration testers while collaborating with Security Operations, Risk, and Engineering teams

Skills

Penetration testing

Cloud platforms

CI/CD tooling

IAM & cloud networking

Offensive security tools

Education

Bachelor's degree in Computer Science / Information Security

Tools

Jenkins

GitLab CI

GitHub Actions

CircleCI

Pacu

ScoutSuite

Prowler

Burp Suite

Job description

Tentacle Tech in Malaysia is seeking an experienced Cloud Vulnerability Management & DevSecOps professional to strengthen cloud security in a leading finance sector environment. You will own end-to-end vulnerability management across Azure and AWS, lead cloud penetration testing engagements, and embed security controls into CI/CD pipelines.

You will mentor junior testers, advise cross-functional teams, and help elevate the organisation's cloud security posture through dashboards and