Cloud Security Engineer

RECRUIT123 PTE. LTD.; Singapore; Hybrid; SGD 78,000 - 117,000; Full time

Benefits offered by this job

Advanced cloud & security certs Spons

Medical benefits

Hybrid work arrangements

Job summary

Recruit123 Pte Ltd is seeking a Cloud Security Engineer in Singapore to design, implement and maintain security controls across multi-cloud environments, embedding security into CI/CD pipelines.

Responsibilities include CSPM/CWPP/CIEM platforms, IaC policy controls, IAM hardening, and secure container orchestration. The role offers a flexible hybrid work arrangement and opportunities for advanced cloud security certifications.

Qualifications

• Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.
• Minimum 3 to 6 years of direct experience in cloud security engineering, infrastructure security, or DevSecOps.
• Proven technical proficiency in at least one major cloud platform (AWS, Azure, or GCP).
• Hands-on experience securing containerized workloads (Kubernetes, Docker) and configuring network security controls.
• Proficient with scripting and automation tools (Python, Bash, Go) and CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins).
• Certifications are strongly preferred (AWS/CISSP/CCSP/etc).
• Good knowledge of MAS TRM or CSA Cloud Security guidelines.

Responsibilities

• Design, implement, and maintain security baselines and guardrails across public cloud environments.
• Deploy and manage CSPM, CWPP, and CIEM platforms.
• Embed DevSecOps in CI/CD with SAST, DAST, SCA, and container image scanning.
• Enforce IaC validation and policy-as-code controls (e.g., Terraform, Open Policy Agent, Checkov, Trivy).
• Configure IAM with least-privilege, SSO, and secrets management (Vault, Secrets Manager).
• Secure container orchestrations (Docker, Kubernetes, EKS, AKS).
• Collaborate with SOC for cloud audit logging, telemetry, and SIEM alert triage.
• Align cloud environments with CIS/ISO frameworks and MAS TRM requirements.
• Advise engineering on cloud threat mitigation as SME.

Skills

Cloud security

DevSecOps

Kubernetes

CI/CD pipelines

Python scripting

Azure/AWS/GCP

SIEM

Education

Bachelor's or Diploma in Cyber/security/IT

Tools

Terraform

Open Policy Agent

Checkov

Trivy

HashiCorp Vault

AWS Secrets Manager

Docker

Kubernetes

EKS

AKS

Splunk

Microsoft Sentinel

Datadog

Job description

Position: Cloud Security Engineer

Salary: SGD 7,000 - SGD 10,500 / month (commensurate with experience)

About the Role

Recruit123 is partnering with our client, an established technology-driven organization in Singapore, to hire a Cloud Security Engineer . In this role, you will be responsible for designing, implementing, and maintaining robust security controls across multi-cloud environments, embedding automated security into CI/CD pipelines, and safeguarding modern cloud infrastructure against emerging threats.

Key Responsibilities

• Design, implement, and maintain security baselines and architectural guardrails across public cloud environments (AWS, Azure, or GCP).
• Deploy and manage Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), and Cloud Infrastructure Entitlement Management (CIEM) platforms.
• Embed DevSecOps practices within CI/CD release pipelines using automated static and dynamic security testing (SAST, DAST, SCA) and container image scanning.
• Enforce secure Infrastructure-as-Code (IaC) validation and policy-as-code controls (e.g., Terraform, Open Policy Agent, Checkov, Trivy).
• Configure, review, and harden Identity and Access Management (IAM) permissions, applying least-privilege principles, SSO, and secrets management solutions (e.g., HashiCorp Vault, AWS Secrets Manager).
• Secure container orchestration platforms and microservices architectures (Docker, Kubernetes / EKS / AKS).
• Collaborate with SOC and incident response teams to ensure comprehensive cloud audit logging, telemetry, and alert triage via SIEM solutions (e.g., Splunk, Microsoft Sentinel, Datadog).
• Align cloud environments with industry standards and Singapore regulatory requirements (e.g., CIS Benchmarks, MAS TRM Guidelines, ISO/IEC 27001, CSA CCM).
• Act as a security subject matter expert to advise software engineering and platform infrastructure teams on cloud threat mitigation.

Requirements

• Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.
• Minimum 3 to 6 years of direct experience in cloud security engineering, infrastructure security, or DevSecOps.
• Proven technical proficiency in at least one major cloud platform (AWS, Microsoft Azure, or GCP).
• Hands-on experience securing containerized workloads (Kubernetes, Docker) and configuring network security controls (VPC/VNet peering, Security Groups, WAF, NSGs).
• Proficient with scripting and automation tools (e.g., Python, Bash, Go) and CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins).
• Recognized certifications are strongly preferred (e.g., AWS Certified Security - Specialty, Azure Security Engineer Associate [AZ-500], CCSP, CCSK, or CISSP).
• Good working knowledge of local risk and compliance standards such as MAS TRM or CSA Cloud Security guidelines.
• Strong troubleshooting ability and cross-functional communication skills across DevOps and business units.

What's on Offer

• Competitive monthly base salary ranging from SGD 7,000 to SGD 10,500, tailored to depth of cloud architecture expertise.
• Key ownership role driving enterprise cloud modernization and zero-trust initiatives.
• Company sponsorship for advanced cloud and security certifications.
• Comprehensive medical benefits and flexible hybrid work arrangements.

Contact Information

• Recruit123 Pte Ltd
• EA Personnel: Lian Cher Chieh (Steffan)
• EA Personnel Registration No.: R1217705
• EA License No.: 25C2810EA
• [e-mail]