Cloud Security Engineer

THAKRAL ONE PTE LTD; Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

THAKRAL ONE PTE LTD seeks an experienced Cloud Security Engineer to manage cloud security across banking and securities domains under a dual-hat arrangement. You will lead risk controls, compliance, and operational resilience within multi-cloud environments, including Azure, AWS, and OCI.

Responsibilities include monitoring CSPM and CWPP tools, reviewing cloud architectures for security gaps, and guiding governance activities.

Qualifications

• 8–10 years of experience in Cloud, Information, or Cyber Security.
• Experience implementing security solutions that enable business activity.
• Actively involved in audits and managed audit relationships.

Responsibilities

• Cloud Security Operations across multi-cloud environments and on‑prem.
• Develop, enforce cloud security standards, policies, and procedures.
• Collaborate with IT/Business teams to address security alerts and mitigations.
• Support incident response, testing, and remediation activities.

Skills

Cloud security

Audits & compliance

Incident response

Security operations

Multi-cloud

Tools

CloudGuard

Wiz

Microsoft Defender for Cloud

CrowdStrike Falcon

Job description

As a Cloud Security Engineer, you will be responsible for Cloud Security (as part of Cyber Security) across both the banking arm and securities business under a dual‑hat arrangement. You will act and make decisions on behalf of both entities, ensuring comprehensive risk controls, compliance, and operational resilience across multi‑cloud environments.

What You’ll Do and How You’ll Succeed

Cloud Security Operations

• Monitor and proactively manage Cloud Security toolsets including CSPM (CloudGuard, Wiz, MS Defender for Cloud) and CWPP (CloudGuard, Wiz, CrowdStrike Falcon).
• Oversee Kubernetes security controls for workloads in AKS, OKE, EKS, and on‑prem environments.
• Review and assess enterprise cloud architectures for security gaps and recommend mitigations.
• Investigate and track cloud security alerts using ServiceNow workflows.

Policy, Standards & Governance

• Ensure NIST, ISO27002, and CIS‑aligned risk controls are covered.
• Develop, improve, and enforce cloud security standards, policies, and procedures.
• Conduct Cyber Security reviews for on‑prem, cloud, and third‑party systems, including firewall rules, architecture, and network designs.
• Support governance, risk, and compliance activities, including operational risk reporting and audit liaison.

Integration & Collaboration

• Collaborate with IT teams to highlight, manage, and mitigate Cyber Security alerts, threats, and vulnerabilities.
• Liaise with Technology and Business teams to ensure systems meet security standards or agree on mitigations.
• Provide operational insights to security engineering and architecture teams.

Continuous Improvement & Incident Response

• Support Cyber Security incidents, penetration testing, and remedial actions.
• Contribute to continuous improvement of security controls and detection rules.
• Maintain up‑to‑date knowledge of laws, regulations, and best practices relating to Cyber Security.

Experience

• You have 8–10 years of experience in Cloud, Information, or Cyber Security.
• You have experience implementing security solutions that enable business activity.
• You have been actively involved in audits and managed audit relationships.

Technical Expertise

• You have strong knowledge of frameworks and standards such as ISO27001, NIST, CIS, GDPR.
• You are proficient in cloud security tools (CSPM, CWPP) and multi‑cloud environments (Azure, OCI, AWS).
• You are experienced with Kubernetes security, endpoint, network, and web access monitoring systems.
• You hold certifications such as CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, or CEH (preferred).

Ways of Working

• You demonstrate excellent communication and interpersonal skills.
• You operate with urgency, accountability, and sound judgement.
• You are structured, logical, and proactive in your approach.
• You are comfortable taking ownership of workstreams and delivering difficult messages when needed.
• You are passionate about Cyber Security and proactive in identifying and mitigating risks.

Philippines