Cloud Security Engineer

Tookitaki Holding; Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

TookiTaki is expanding its cloud security foundation to support AI-driven AML and fraud-detection platforms across global banks and fintechs. We seek a Cloud Security Engineer who designs, hardens, and defends cloud environments powering our mission.

Responsibilities include architecture design, security hardening, threat detection, DevSecOps automation, IAM governance, and DR planning. 5–9 years in cloud security with AWS is preferred.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity or equivalent.
• 5–9 years in cloud engineering or cloud security, with AWS experience.
• Experience in regulated or compliance-heavy environments preferred.

Responsibilities

• Design and implement secure cloud architectures across AWS.
• Harden infrastructure and implement end-to-end compliance guardrails.
• Develop runtime threat detection, incident response, and root-cause analysis.
• Integrate security tooling into CI/CD pipelines and IaC.
• Govern IAM, least-privilege access, and secrets management.

Skills

Cloud Security

PCI-DSS

IAM & Access

IaC

Kubernetes security

Security Automation

Programming (Python/Go/Java)

Education

Bachelor’s in CS/Engineering

Master’s preferred

Tools

Terraform

CloudFormation

GuardDuty

Security Hub

ELK/Prometheus/Grafana

Job description

TookiTaki, the global leader building the Trust Layer for Financial Services, is strengthening its cloud security foundation as we scale our AI-driven AML and fraud-detection platforms across global banks and fintechs. We are looking for a Cloud Security Engineer who blends deep cloud expertise with uncompromising security standards — someone who can design, harden, and defend the cloud environments that power our mission. If secure, resilient, and scalable infrastructure is your playground, welcome home

1. Cloud Security Architecture

• Design and implement secure cloud architectures across AW
• SEnsure systems meet enterprise-grade security, availability, and performance requirements
• Drive secure-by-default principles across deployments, services, and automation pipelines

2. Security Hardening & Compliance

• Own and maintain PCI-DSS–aligned cloud security controls
• Lead infrastructure hardening across compute, data, storage, network, and IAM
• Implement end-to-end compliance guardrails, auditing, and continuous monitoring
• Drive patching, vulnerability management, and threat exposure reduction

3. Threat Detection & Incident Response

• Develop runtime threat detection and alerting frameworks (SIEM/SOAR, IDS, CSPM)
• Conduct compromise assessments and respond to potential breaches with speed and clarity
• Act as the primary escalation point for security incidents and lead root cause analysis
• Continuously enhance detection logic using emerging threats from the AFC ecosystem

4. Security Automation & DevSecOps

• Integrate security tooling into CI/CD workflows (SAST, SCA, DAST, secrets scanning)
• Automate policies using IaC (Terraform/CloudFormation) and policy-as-code frameworks
• Build automated remediation playbooks to reduce manual intervention

5. Identity, Access & Secrets Management

• Implement and govern IAM standards across cloud environments
• Build least-privilege, zero-trust access frameworks
• Maintain secure secrets management via Vault, KMS, or similar tooling

6. Disaster Recovery & Business Continuity

• Lead DR planning and execution with clear RTO/RPO targets

7. Education & Experience

• Education: Required: Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent. Preferred: Master’s degree in Cybersecurity or Cloud Security
• Experience: 5–9 years in cloud engineering or cloud security roles. Proven hands-on experience securing cloud platforms AWS. Experience in regulated or compliance-heavy environments (fintech, banking, regtech) preferred

8. Technical Expertise

• Strong understanding of cloud security frameworks (CIS, NIST, PCI-DSS)
• Experience with IaC tools: Terraform, CloudFormation
• Hands-on with Kubernetes security (EKS, AKS, GKE)
• Ability to detect, triage and prevent network-level vulnerabilities and misconfigurations in the cloud infrastructure
• Hands-on with container security (Docker, Kubernetes, EKS/GKE)
• Experience with cloud-native security tools (GuardDuty, Security Hub, GCP SCC, Prisma, Wiz, etc.)
• Strong knowledge of monitoring & logging stacks (ELK, Prometheus, Grafana)
• Proficiency in Python, Go, or Java for security automation