Security Cloud Security Engineer

Private Advertiser; Makati; On-site; PHP 1,000,000 - 1,800,000; Full time

Job summary

Private Advertiser is seeking a Cloud Security Engineer / Lead to drive security initiatives across AWS, Azure, and GCP. You will design and implement security controls, oversee cloud posture, and mentor junior engineers in a fintech environment.

The role emphasizes governance, risk mitigation, incident response, and adherence to standards like NIST, ISO 27001, CIS, GDPR, HIPAA, and PCI-DSS. Strong collaboration with cross-functional teams is essential.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• 2+ years of cloud infrastructure/security experience, fintech preferred.
• Experience with IAM, SSO, MFA, and VPN.
• Experience with multi-cloud security tools and monitoring.
• Knowledge of NIST, ISO 27001, CIS, GDPR, HIPAA, PCI-DSS.

Responsibilities

• Lead cloud security initiatives and define action plans, timelines, deliverables.
• Mentor junior security engineers and provide technical guidance.
• Monitor team performance and drive continuous improvement.
• Design, implement and maintain security controls across AWS, Azure, GCP.
• Perform cloud infrastructure hardening and security config reviews.
• Monitor and improve cloud security posture and incident response.
• Develop and enforce cloud security policies, standards, procedures.
• Ensure compliance with major frameworks and risk mitigation.
• Provide Level 3 support for cloud security incidents.

Skills

Cloud security leadership

IAM management

Security monitoring

Scripting (Python, Bash, PowerShell)

Linux/Windows administration

DevOps/Agile practices

Security policy & governance

Incident response & forensics

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Okta / SSO / MFA

AWS IAM / AWS Security Hub

Azure / GCP security services

CloudTrail / GuardDuty / Splunk

AWS KMS / Secrets Manager / Vault

OpenSSL / SSL/TLS tooling

Job description

About the role

Cloud Security Engineer / Lead role responsible for leading cloud security initiatives, designing and implementing security controls across AWS, Azure, and GCP, ensuring compliance with major frameworks, and providing technical leadership to junior security engineers. The role encompasses cloud posture management, governance, risk mitigation, incident response, and collaboration with cross-functional teams to embed security into cloud operations.

Key responsibilities

• Lead cloud security initiatives, define action plans, timelines, and deliverables

• Mentor junior security engineers and provide technical guidance

• Monitor team performance and drive continuous improvement

• Design, implement, and maintain security controls across AWS, Azure, and GCP

• Perform cloud infrastructure hardening and security configuration reviews

• Monitor and continuously improve cloud security posture

• Develop and enforce cloud security policies, standards, and procedures

• Ensure compliance with NIST, ISO 27001, CIS, GDPR, HIPAA, and PCI-DSS requirements

• Identify, assess, prioritize, and mitigate cloud security risks

• Provide Level 3 technical support for cloud security incidents

About you

• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field

• At least 2 years of cloud infrastructure/security experience, preferably in fintech or financial services

• 2–3 years of experience with IAM: Okta, AWS IAM, SSO, MFA, VPN

• 2–3 years of experience with Cloud: AWS Security Hub, S3, Route 53, CloudWatch, Azure, GCP, DigitalOcean

• 2–3 years of experience with Security Monitoring: CloudTrail, GuardDuty, Trend Micro Vision One, CrowdStrike Falcon, Splunk

• 2–3 years of experience with SSL/TLS: AWS ACM, OpenSSL, CSR, AWS ALB

• 2–3 years of experience with Scripting: AWS CLI, Python, Bash, PowerShell

• 2–3 years of experience with Systems: Linux and Windows administration

• 2–3 years of experience with DevOps/Agile: Jira, Confluence, GitLab, Scrum

• 2–3 years of experience with Key Management: AWS KMS, AWS Secrets Manager, HashiCorp Vault