Specialist, Cloud Security

TNG Digital Sdn Bhd; Kuala Lumpur; Sur place; MYR 120 000 - 180 000; Plein temps

Résumé du poste

TNG Digital Sdn Bhd in Kuala Lumpur, Malaysia is seeking a Specialist in Cloud Security to secure cloud infrastructure and applications. You will design secure cloud architectures, enforce IAM controls, and monitor for vulnerabilities across multi-cloud environments.

The role requires hands-on experience with CSPM, WAF, DLP, KMS, API security, and incident response, ensuring compliance with security standards and best practices. This is a permanent position based in Kuala Lumpur.

Qualifications

• Bachelor's degree in computer science, IT, or related field required.
• 3–5 years of cloud security experience in cloud environments.
• Experience with IAM, encryption, firewalls, WAF, IDS, and DDoS protection.

Responsabilités

• Design and implement secure cloud architectures in AWS, Azure, or Alibaba Cloud.
• Enforce IAM controls: least privilege, RBAC, MFA, and privileged access monitoring.

Connaissances

IAM

Encryption

WAF

DDoS protection

API security

Cloud security best practices

Incident response

Formation

Bachelor's degree in CS/IT or related field

Outils

AWS Control Tower

Azure Blueprints

CSPM

KMS

TLS/AES

OAuth2/JWT

CloudTrail / Activity Logs / ActionTrail

Description du poste

# Specialist, *Cloud Security*Kuala Lumpur, MalaysiaPermanent#### Duties & Responsibilities* This role is a technical role which primary responsibility will be to ensure the security and confidentiality of TNGD’s cloud-based infrastructure and applications. The key duties and responsibilities involve but not limited to:* Design and implement secure cloud architectures in AWS, Azure, or Alibaba Cloud.* Implement and enforce strong Identity and Access Management (IAM) controls, including least privilege, RBAC, MFA, and privileged access monitoring.* Identify and remediate cloud infrastructure vulnerabilities and misconfigurations using CSPM and other tools.* Configure and manage network security controls, including cloud firewalls, Web Application Firewalls (WAF), and DDoS mitigation services (e.g., AWS Shield, AWS WAF, AWS Network Firewall) to protect applications from external threats.* Deploy and manage Data Loss Prevention (DLP) tools and policies to prevent unauthorized data exposure.* Configure and maintain Key Management Systems (KMS) for secure cryptographic key storage and usage.* Implement and manage encryption protocols for data at rest and in transit using industry standards (e.g., TLS, AES).* Perform operating system (OS) hardening (CIS Benchmark) and ensure timely patch management across cloud-based systems to reduce vulnerability exposure.* Define and enforce security policies, standards, and best practices across cloud environments (e.g., PCI-DSS, RMiT, ISO 27001).* Oversee API security management, including secure design and governance of APIs, Authentication and authorization (e.g., OAuth2, API keys, JWT), rate limiting, input validation, and anomaly detection.* Develop and enforce cloud policies to maintain consistent and secure cloud configurations (e.g., AWS SCP, Azure Policy).* Manage and analyse security-relevant logs from various sources, including (AWS CloudTrail, Azure Activity Logs, Alibaba ActionTrail).* Respond to cloud-related security incidents, collaborate with SOC/IR teams, and lead forensic investigations where needed.* Staying up-to-date with emerging cloud security trends, technologies, and threats, and making recommendations to improve the organization's security posture.#### Requirements* Bachelor's degree in computer science, information technology, or a related field. Degree in IT Security related field is preferred.* Minimum of 3-5 years of experience in cloud security or related fields, such as cybersecurity or information security with a focus on cloud environments.* Experience with cloud security technologies and tools, such as identity and access management (IAM), encryption, firewalls, and intrusion detection systems (IDS), WAF, DDoS protection etc.* Experience in managing a secure Cloud Landing Zone (e.g., using AWS Control Tower, Azure Blueprints) to establish a scalable, secure foundation for cloud environments.* In-depth understanding of cloud security best practices and regulatory compliance frameworks.* Experience in managing cloud security incidents, including conducting forensic analysis and incident response in cloud-based environments.* Experience with container security (Docker, Kubernetes).* Strong understanding of disaster recovery and business continuity planning within cloud environments.* Relevant cloud certifications (e.g., AWS Certified Security Specialty, Azure Security Engineer Associate, Alibaba Cloud Security Engineer are preferable.* Strong knowledge of API security protocols and communication methods, including RESTful APIs, OAuth2, JWT, WebSockets, and GraphQL, as well as experience in securing and optimizing API communication for high-performance environments.* Relevant cloud certifications (e.g., AWS Certified Security Specialty, Azure Security Engineer Associate, Alibaba Cloud Security Engineer are preferable.