Cloud Security Engineer

HUDSON RPO (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

HUDSON RPO (SINGAPORE) PTE. LTD. is seeking a skilled Cloud Security Engineer to ensure robustness, integrity, and compliance across multi-cloud ecosystems.

You will design, validate, and maintain security controls protecting critical assets in collaboration with security architecture and engineering teams. You will implement security-by-design principles, align with security baselines and regulatory requirements, and support incident investigations and vulnerability management across cloud

Responsibilities

• Control Validation: perform regular security control validation and effectiveness tests across cloud platforms.
• Implementation & Maintenance: develop, implement, and maintain cloud security controls per designs.
• Security by Design: support security-by-design across cloud infra and apps.
• Compliance & Frameworks: assess environments against policies, baselines, and regulatory requirements.
• Security Tooling: configure and manage cloud-native security services and monitoring tools.
• Weakness Identification: review configurations to identify vulnerabilities and gaps.
• Cross-Team Collaboration: translate security requirements into technical controls with teams.
• Vulnerability Management: support remediation tracking and validation of fixes.
• Risk Assessments: participate in cloud security risk assessments and mitigation.
• Deployments Review: review security for new services and tech deployments.
• Documentation: develop security standards and architecture docs.
• Incident Support: assist investigations and provide expertise during containment.
• DevSecOps Automation: automate checks, continuous compliance, and metrics reporting.
• Threat Intelligence: monitor threats and vulnerabilities, recommend stance improvements.

Job description

Job Description

We are seeking a highly skilled and analytical Cloud Security Engineer

In this role, you will be responsible for ensuring the robustness, integrity, and compliance of our multi-cloud ecosystems.

You will work closely with security architecture and engineering teams to design, validate, and maintain technical security controls that protect critical digital assets

Key Responsibilities

• Control Validation: Perform regular security control validation and effectiveness testing across cloud platforms and services.
• Implementation & Maintenance: Develop, implement, and maintain cloud security controls in alignment with approved security architecture designs.
• Security by Design: Support the implementation of security-by-design principles across cloud infrastructure and business applications.
• Compliance & Frameworks: Assess cloud environments against internal security policies, security baselines, and local/international regulatory requirements.
• Security Tooling: Configure and manage cloud-native security services, advanced monitoring capabilities, and security automation tools.
• Weakness Identification: Systematically review cloud configurations to identify security vulnerabilities, misconfigurations, and compliance gaps.
• Cross-Team Collaboration: Collaborate with Security Architects to translate high-level security requirements into technical controls and practical operational procedures.
• Vulnerability Management: Support comprehensive vulnerability management activities, including remediation tracking and technical validation of corrective actions.
• Risk Assessments: Participate actively in cloud security risk assessments and recommend appropriate risk mitigation measures.
• Deployments Review: Conduct security control reviews for new cloud services, infrastructure deployments, and emerging technology implementations.
• Documentation: Develop technical security standards, operational procedures, and technical architecture documentation related to cloud security.
• Incident Support: Support security incident investigations and provide technical expertise during threat containment and remediation activities.
• DevSecOps Automation: Automate routine security checks, continuous compliance monitoring, and reporting metrics wherever practical.
• Threat Intelligence: Monitor emerging cloud security threats, zero-day vulnerabilities, and industry best practices, proactively recommending security stance improvements