Senior Cloud Security Engineer

Career Connect; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Career Connect is seeking a Senior Cloud Security Engineer to design, implement, and manage robust security for our cloud infrastructure. You will lead a team, define security standards, and work across DevOps, Engineering, and Compliance to protect data.

The role requires strong cloud security knowledge, risk management, and effective communication. You will stay current with cloud security trends and guide incident response and remediation efforts.

Qualifications

• Bachelor's degree in Computer Science, IT, or related field.
• 2+ years of cloud infrastructure and security experience, fintech preferred.

Responsibilities

• Lead cloud security deliverables and guide the team.
• Mentor junior security engineers and ensure timely delivery.
• Collaborate with DevOps, Engineering, and Compliance to embed security across cloud operations.
• Evaluate and implement security tools to improve posture.
• Communicate risks and mitigations to stakeholders clearly.

Skills

Cloud security

Team leadership

Compliance knowledge

Communication

Problem solving

Education

Bachelor's degree in Computer Science, Information Technology, or related fields

Tools

OKTA / IAM

AWS / Azure / GCP

Scripting (Python, Bash, PowerShell)

SIEM / CSPM tools (Trend Micro Vision One, Splunk, GuardDuty)

AWS services (S3, Route53, CloudWatch)

Job description

The Senior Cloud Security Engineer will be responsible for designing, implementing, and managing robust security solutions for our cloud infrastructure. This role requires a deep understanding of cloud security best practices, risk management, and compliance frameworks. The Senior Cloud Security Engineer will work closely with cross-functional teams to ensure the security of our cloud environments and protect sensitive data. The role involves leading and guiding a team, strong problem-solving skills, attention to detail, and effective communication are essential for collaborating across teams and implementing robust security practices

KEY RESPONSIBILITIES

People Management

• Leading the team, creating action plans for cloud security deliverables, and evaluating team performance for continuous improvement.
• Provide guidance and mentorship to junior security engineers and team members.

Security Posture Management

• Lead the design and implementation of infrastructure security hardening for cloud environments (AWS, Azure, GCP).
• Implement new cloud features and services as required.
• Ensure the overall security posture of cloud environments is maintained and continuously improved.
• Ensure all cloud resources are well-secured.
• Develop and enforce security policies, standards, and procedures for cloud services.
• Conduct a cloud user access review.
  

Compliance and Governance

• Ensure compliance with relevant regulatory requirements and industry standards (e.g., GDPR, HIPAA, PCI-DSS).
• Maintain up-to-date documentation of security policies, procedures, and compliance status.
• Identify, assess, and prioritize security risks associated with cloud services and applications.
• Develop and implement risk mitigation strategies and ensure they are effectively communicated to stakeholders.

Collaboration and Learning

• Collaborate with cross-functional teams, including DevOps, Engineering, and
• Compliance, to ensure security is integrated into all aspects of cloud operations.
• Communicate security risks and recommendations to senior management and other stakeholders clearly and effectively.
• Evaluate and implement security tools and technologies to enhance cloud security posture
• Stay current with emerging cloud security trends, threats, and technologies.
• Provide Level 3 technical support and resolve security issues through root causE analysis.
• Participating in global follow-the-sun support, including after-hours on-call duties
• Analyze and remediate security incidents, breaches, or threats.

Documentation

• Provide clear task breakdowns and time estimates.
• Document configurations, processes, and incident resolutions.

Adhere to quality and compliance standards as part of our Information Security Management System. This includes following documented processes, participating in continuous improvement, and maintaining accurate records. Each team member is responsible for supporting a safe, efficient, and customer-focused work environment.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or related fields.
• At least 2 years of experience in cloud infrastructure and security, preferably in fintech or financial institutions.
• 2-3 years of experience in the following skills/tools:
• Identity and Access Management (OKTA, AWS IAM, SSO, MFA, VPN)
• Cloud Management (AWS Securty Hub, AWS S3, AWS Route53, AWS Cloudwatch, Digital Ocean, GCP, Azure)
• SIEM, FIM, and IPS/IDS (AWS Cloudtrail, Trend Micro Vision One, Crowdstrike Falcon, Splunk, AWS Guard Duty)
• Scripting (AWS CLI, Python, Bash, Powershell)
• Linux and Windows Administration
• Agile Methodology (Scrum, JIRA, Confluence, GitLab Issue)
• Key Management (AWS Secrets, AWS KMS, Hashicorp Vault)

REQUIRED COMPETENCIES

• Project Management: Ability to manage multiple cloud security projects simultaneously, ensuring timely and efficient delivery.
• Cloud Security Knowledge: Deep understanding of cloud security principles, architectures, and best practices across major cloud platforms (AWS, Azure, GCP)
• Security Frameworks and Compliance: Proficiency in security frameworks (NIST, ISO 27001, CIS) and compliance standards (GDPR, HIPAA, PCI-DSS)
• Security Tools and Technologies: Familiarity with security tools such as SIEM, DLP, CSPM, and endpoint protection solutions
• Attention to Detail: Ensures accuracy and thoroughness in all technical tasks and documentation.