Cyber Cloud Platform Security Engineer

Tap Growth ai; Singapore; Presencial; SGD 90.000 - 130.000; Jornada completa

Descripción de la vacante

Tap Growth ai in Singapore is seeking a Cyber Cloud Platform Security Engineer to oversee go-live readiness, CSPM findings, and cloud security configurations across AWS and Azure.

You will coordinate with stakeholders, maintain auditable records, and drive remediation with infrastructure and application teams, while prioritizing high-risk findings and ensuring regulatory compliance.

Formación

• Diploma or Bachelor's degree in Cybersecurity or related field.
• Azure security or administration certification preferred (AZ-500).
• Experience with CSPM tools and Defender for Cloud.
• Strong knowledge of Azure RBAC, Entra ID and Azure Policy.
• Willing to coordinate with multiple teams and vendors.

Responsabilidades

• Maintain go-live readiness trackers and review documentation.
• Manage Azure RBAC and cloud access reviews.
• Review CSPM findings and coordinate remediation.
• Provide security support for AWS/Azure configurations.
• Support governance, compliance assessments and incident coordination.
• Prepare security posture reports and dashboards.

Conocimientos

Azure RBAC & Entra ID

Azure Policy

Privileged access management

CSPM/Posture management

Defender for Cloud

AWS Security Hub

Educación

Diploma or Bachelor's in Cybersecurity/IT

Descripción del empleo

We're Hiring: Cyber Cloud Platform Security Engineer!

Experience Levels:

• Associate Consultant: 1–3 Years
• Senior Consultant: 7+ Years

Scope of Work

The Cyber Cloud Platform Security Engineer will support day-to-day cloud cybersecurity operations, focusing on system go-live readiness, CSPM and CloudSCAPE findings, AWS/Azure security configurations, cloud access administration, compliance assessments and remediation coordination.

The role involves validating security findings, recommending corrective actions, maintaining auditable records and coordinating with System Owners, System OICs, infrastructure teams, application vendors and service providers.

Cybersecurity alert monitoring, triage, investigation and response are excluded. Risk acceptance and final cybersecurity clearance remain with the relevant approving authorities.

Key Responsibilities

1. System Go-Live Readiness

• Maintain cybersecurity go-live trackers for new systems, technology refreshes and migrations.
• Review go-live documentation, including BIA, Risk Assessment, system architecture, IT asset inventory, hardening evidence, VA/PT reports, System Security Plans and backup/DR evidence.
• Identify missing documentation, unresolved findings and outstanding security requirements.
• Coordinate with technical teams and vendors to close go-live prerequisites.
• Track pre-go-live and post-go-live actions, including removal of temporary access and elevated privileges.
• Prepare readiness reports and escalated overdue items.

2. Azure / Cloud Access and RBAC Administration

• Process approved cloud access and role-assignment requests.
• Support Azure RBAC permission assignment, modification and removal.
• Maintain auditable records of access changes and approvals.
• Conduct periodic reviews of temporary and elevated access.
• Ensure compliance with access-control and segregation-of-duties requirements.
• Escalate excessive, conflicting or unauthorised access requests.

3. CSPM, CloudSCAPE and Security Compliance

• Review CSPM and CloudSCAPE findings using Microsoft Defender for Cloud, Azure CSPM and AWS Security Hub.
• Categorise and prioritise findings based on severity, internet exposure and compliance requirements.
• Validate security misconfigurations, vulnerabilities and false positives.
• Recommend remediation actions and coordinate with infrastructure and application teams.
• Maintain findings registers, remediation status, technical justifications, approved deviations and closure evidence.
• Escalate high-risk, recurring and overdue findings.
• Prepare regular cloud security posture reports.

4. Cloud Security Technical Support

• Provide technical support for AWS and Azure security configurations.
• Review IAM, privileged access, network security, encryption and cloud resource configurations.
• Investigate configuration issues and recommend corrective actions.
• Coordinate with cloud infrastructure teams, vendors and application teams for remediation.
• Validate cloud configurations against security requirements.
• Ensure production changes follow approved change-management processes.

5. Security Compliance and Governance

• Support assessments against government cybersecurity policies, security specifications and System Security Plans.
• Identify non-compliant cloud configurations and recommend corrective measures.
• Validate remediation evidence and document outstanding compliance gaps.
• Support risk assessments by documenting technical issues, remediation constraints and proposed mitigation measures.
• Maintain SOPs, checklists, knowledge-base articles and audit records.

6. Reporting and Stakeholder Coordination

• Prepare cybersecurity posture reports covering go-live readiness, cloud findings, compliance deviations and remediation progress.
• Maintain accurate findings and remediation trackers.
• Highlight critical findings, overdue actions and recurring configuration issues.
• Coordinate with System Owners, System OICs, application teams, infrastructure teams, government technology teams and external vendors.
• Provide technical recommendations and participate in security review meetings.
• Support cybersecurity initiatives and process automation.

Key Deliverables

• Cybersecurity go-live trackers and readiness reports.
• Go-live documentation completeness reviews.
• Cloud access and RBAC administration records.
• CSPM / CloudSCAPE findings and remediation registers.
• Validated false-positive assessments and closure evidence.
• AWS/Azure security configuration reviews and technical recommendations.
• Compliance assessment records, SOPs, checklists and dashboards.
• Regular cybersecurity posture and management reports.

Mandatory Technical Skills

• Hands-on experience administering or supporting Microsoft Azure environments.
• Strong understanding of Azure RBAC, Microsoft Entra ID, Azure Policy and privileged access.
• Ability to provide technical support on AWS security configurations.
• Working knowledge of Microsoft Defender for Cloud or equivalent CSPM technology.
• Understanding of cloud security, IAM, network security, encryption and vulnerability remediation.
• Experience with security findings validation, compliance deviations and remediation evidence.
• Ability to interpret system architecture diagrams, security assessment reports and hardening evidence.
• Knowledge of change/service requests, access administration, risk tracking and evidence management.
• Good documentation, communication and stakeholder coordination skills.

Good-to-Have Skills

• Experience with government GCC/GCC+ environments and CloudSCAPE.
• Experience with AWS Security Hub.
• Knowledge of Azure Log Analytics Workspace and Azure Workbooks.
• Experience in cybersecurity go-live, VAPT, hardening, SSP and risk-assessment workflows.
• Experience with scripting, security automation and workflow automation.

Qualifications and Certifications

• Diploma or Bachelor's degree in Cybersecurity, Computer Science, IT, Cloud Engineering or a related discipline.
• Azure security or administration certification preferred, such as AZ-500.
• AWS security/cloud certifications, CISSP, CCSP, CISM or CRISC will be advantageous.

Working Arrangement

• Primarily onsite at designated office premises.
• Collaboration with cybersecurity, infrastructure, application and vendor teams.
• Occasional support outside normal office hours may be required for production cutovers, urgent remediation and scheduled maintenance, subject to approved arrangements.