AWS Security Engineer

Vinova; Singapore; Presencial; SGD 120 000 - 200 000; Tempo integral

Resumo da oferta

Vinova is seeking an experienced AWS Security Engineer to design, implement, and maintain security controls across cloud infrastructure and workloads in Singapore. You will assess cloud security risks, strengthen security architecture, automate security operations, and support compliance with organisational and project requirements.

You will work closely with Cloud, DevOps, Application, Engineering, and Operations teams to embed security throughout the development and operations lifecycle.

Qualificações

• Minimum 4 years of cloud security engineering experience.
• Hands-on with securing AWS infrastructure and workloads.
• Knowledge of AWS security services (IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub).
• Experience with CIS benchmarks, NIST, ISO 27001, SOC 2, PCI DSS or public sector requirements.

Responsabilidades

• Conduct cloud security assessments, architecture reviews, and risk assessments for AWS environments.
• Design, implement, and maintain secure cloud architectures, landing zones, account segregation, guardrails, and baseline configurations.
• Harden cloud infrastructure, services, VMs, containers, and platform components.
• Manage IAM, least privilege, federation, privileged access, secrets management, and encryption key management.
• Configure network security controls including segmentation, firewalls, WAF, DDoS protection, and encryption.
• Configure security monitoring, logging, and alerting for threat detection and incident response.
• Perform vulnerability assessments and track remediation through to closure.
• Collaborate with Engineering and Operations to investigate findings and implement corrective actions.
• Develop scripts and IaC to automate security hardening, monitoring, and remediation.
• Integrate security into CI/CD pipelines and software delivery processes.
• Support container and Kubernetes security, including image scanning and secrets management.
• Review environments for compliance with security policies, governance standards, and data residency controls.
• Maintain security documentation and remediation records.

Conhecimentos

Cloud security engineering

AWS security

Security assessments

Risk analysis

Identity and access management

Security automation

CI/CD security

Formação académica

Bachelor's or Diploma in Computer Science/Engineering

Ferramentas

Terraform

AWS CloudFormation

GitLab/GitHub Actions

Kubernetes

Descrição da oferta de emprego

Experience: Minimum 4 years of relevant experience

About the Role

We are looking for an AWS Security Engineer to design, implement, and maintain security controls across cloud infrastructure and workloads. You will assess cloud security risks, strengthen security architecture, automate security operations, and support compliance with organisational and project requirements.

You will work closely with Cloud, DevOps, Application, Engineering, and Operations teams to embed security throughout the development and operations lifecycle. The role requires practical technical expertise, strong analytical skills, and the ability to translate security requirements into effective solutions.

Key Responsibilities

Cloud Security Architecture and Engineering

• Conduct cloud security assessments, architecture reviews, and risk assessments for AWS environments, including public sector and regulated workloads where applicable.
• Design, implement, and maintain secure cloud architectures, landing zones, account segregation, guardrails, and baseline configurations.
• Harden cloud infrastructure, services, virtual machines, containers, and platform components in accordance with approved security standards and benchmarks.
• Implement and manage identity and access controls, including least privilege, federation, privileged access, secrets management, and encryption key management.
• Configure network security controls, including segmentation, firewalls, web application firewalls, DDoS protection, private connectivity, and encryption.

Security Monitoring and Remediation

• Configure and maintain cloud security monitoring, logging, and alerting to support threat detection, investigation, and incident response.
• Perform vulnerability assessments and configuration reviews, prioritise findings, and track remediation through to closure.
• Collaborate with Engineering and Operations teams to investigate security findings and implement corrective actions.
• Improve security processes, operational playbooks, and tools to strengthen cloud security posture and operational efficiency.

Security Automation and DevSecOps

• Develop scripts and Infrastructure as Code to automate security hardening, monitoring, compliance checks, and remediation.
• Integrate security controls and automated security testing into CI/CD pipelines and software delivery processes.
• Support container and Kubernetes security, including image scanning, runtime protection, and secrets management.
• Undertake related DevSecOps or Cloud Platform Security responsibilities as required by project needs.

Governance and Collaboration

• Review cloud environments for compliance with security policies, cloud governance standards, data residency controls, and applicable public sector requirements.
• Maintain security documentation, assessment findings, configuration standards, and remediation records.
• Work with technical teams and stakeholders to understand requirements, communicate risks, and recommend practical security solutions.

Required Qualifications and Experience

• Degree or Diploma in Computer Science, Computer Engineering, Electronics Engineering, Information Technology, or a related discipline.
• Minimum 4 years of experience in cloud security engineering, security assessments, risk analysis, and remediation.
• Hands-on experience securing AWS infrastructure and workloads.
• Working knowledge of AWS security and governance services, such as IAM, Organizations, Control Tower, KMS, CloudTrail, AWS Config, GuardDuty, Security Hub, Inspector, and WAF.
• Practical understanding of identity and access management, network security, encryption, secrets management, and cloud logging.
• Ability to assess security configurations, investigate findings, and work with technical teams to resolve vulnerabilities.
• Strong analytical and problem-solving skills, with the ability to work independently and manage competing priorities.
• Clear communication skills in English and the ability to explain technical security issues to different stakeholders.

Preferred Qualifications and Experience

• Experience with Singapore Government Commercial Cloud (GCC), public sector, or other regulated cloud environments.
• Experience designing secure landing zones, multi-account architectures, and cloud governance controls.
• Experience with Infrastructure as Code tools such as Terraform or AWS CloudFormation.
• Experience with CI/CD tools such as GitLab, GitHub Actions, Jenkins, or Azure DevOps, preferably within an Agile environment.
• Familiarity with cloud security posture management (CSPM), cloud workload protection (CWPP), or cloud-native application protection platform (CNAPP) tools, such as Wiz, Prisma Cloud, or equivalent.
• Experience with container and Kubernetes security, particularly Amazon EKS.
• Familiarity with PAM, zero trust, PKI, SIEM/SOAR, and incident response.
• Experience with SAST, DAST, software composition analysis, and secrets scanning.
• Familiarity with CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS, or applicable public sector security requirements.
• Experience securing Azure environments using services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, or Azure Firewall.
• Relevant certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect, CCSP, CCSK, CISSP, or CISM.
• Security testing certifications such as CEH, OSCP, GPEN, or GWAPT.