Cloud Security Engineer: DevSecOps & Zero-Trust Lead

RECRUIT123 PTE. LTD.; Singapore; Hybrid; SGD 78,000 - 117,000; Full time

Benefits offered by this job

Advanced cloud & security certs Spons

Medical benefits

Hybrid work arrangements

Job summary

Recruit123 Pte Ltd is seeking a Cloud Security Engineer in Singapore to design, implement and maintain security controls across multi-cloud environments, embedding security into CI/CD pipelines.

Responsibilities include CSPM/CWPP/CIEM platforms, IaC policy controls, IAM hardening, and secure container orchestration. The role offers a flexible hybrid work arrangement and opportunities for advanced cloud security certifications.

Qualifications

• Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.
• Minimum 3 to 6 years of direct experience in cloud security engineering, infrastructure security, or DevSecOps.
• Proven technical proficiency in at least one major cloud platform (AWS, Azure, or GCP).
• Hands-on experience securing containerized workloads (Kubernetes, Docker) and configuring network security controls.
• Proficient with scripting and automation tools (Python, Bash, Go) and CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins).
• Certifications are strongly preferred (AWS/CISSP/CCSP/etc).
• Good knowledge of MAS TRM or CSA Cloud Security guidelines.

Responsibilities

• Design, implement, and maintain security baselines and guardrails across public cloud environments.
• Deploy and manage CSPM, CWPP, and CIEM platforms.
• Embed DevSecOps in CI/CD with SAST, DAST, SCA, and container image scanning.
• Enforce IaC validation and policy-as-code controls (e.g., Terraform, Open Policy Agent, Checkov, Trivy).
• Configure IAM with least-privilege, SSO, and secrets management (Vault, Secrets Manager).
• Secure container orchestrations (Docker, Kubernetes, EKS, AKS).
• Collaborate with SOC for cloud audit logging, telemetry, and SIEM alert triage.
• Align cloud environments with CIS/ISO frameworks and MAS TRM requirements.
• Advise engineering on cloud threat mitigation as SME.

Skills

Cloud security

DevSecOps

Kubernetes

CI/CD pipelines

Python scripting

Azure/AWS/GCP

SIEM

Education

Bachelor's or Diploma in Cyber/security/IT

Tools

Terraform

Open Policy Agent

Checkov

Trivy

HashiCorp Vault

AWS Secrets Manager

Docker

Kubernetes

EKS

AKS

Splunk

Microsoft Sentinel

Datadog

Job description

Recruit123 Pte Ltd is seeking a Cloud Security Engineer in Singapore to design, implement and maintain security controls across multi-cloud environments, embedding security into CI/CD pipelines.

Responsibilities include CSPM/CWPP/CIEM platforms, IaC policy controls, IAM hardening, and secure container orchestration. The role offers a flexible hybrid work arrangement and opportunities for advanced cloud security certifications.