Cyber Cloud Platform Security Engineer

Optimum Solutions Pte Ltd; Singapore; In loco; SGD 80.000 - 130.000; Tempo pieno

Descrizione del lavoro

Optimum Solutions Pte Ltd in Singapore is seeking a Cloud Security Engineer to help strengthen our cloud security posture across Azure and AWS, with a focus on IAM, CSPM, and governance.

You will work with system owners and IT teams to ensure go-live readiness, perform risk assessments, and drive remediation and automation initiatives.

Competenze

• Diploma or degree in cybersecurity, CS, IT or related field.
• Azure security administration experience with RBAC, Entra ID, and policy.
• Familiar with AWS Security Hub and CSPM tools.
• Strong understanding of IAM, encryption and vulnerability management.
• Ability to interpret security assessment reports and architecture diagrams.
• Experience with go-live readiness and risk tracking is a plus.

Mansioni

• Track security readiness for new systems, migrations and tech refreshes.
• Review go-live docs including risk assessments and security plans.
• Coordinate with owners, vendors and IT teams to resolve security requirements.
• Monitor post-go-live actions and elevate unresolved risks.
• Prepare regular cybersecurity reports on posture and remediation progress.

Conoscenze

Cloud security concepts

IAM

Vulnerability management

Security reports interpretation

Security operations

Formazione

Diploma/Degree in Cybersecurity/CS/IT

Strumenti

Azure Security Center/Azure RBAC

Entra ID

Azure Policy

Privileged access management

AWS Security Hub

Descrizione del lavoro

• Track cybersecurity readiness for new systems, technology refreshes and migrations.
• Review go-live documentation, including risk assessments, system architecture, VAPT reports, hardening evidence and security plans.
• Coordinate with system owners, vendors and IT teams to resolve outstanding security requirements before go-live.
• Monitor post-go-live security actions and elevate unresolved risks.

2. Cloud Security & Access Management

• Administer Azure Role-Based Access Control (RBAC), privileged access and cloud permissions based on approved requests.
• Maintain access records and conduct periodic reviews of temporary or elevated privileges.
• Review AWS and Azure security configurations, including identity management, network security, encryption and access controls.

3. Cloud Security Posture Management (CSPM)

• Monitor cloud security posture and compliance findings using Microsoft Defender for Cloud, AWS Security Hub
• Assess security misconfigurations, vulnerabilities and compliance gaps, including validating findings and false positives.
• Prioritise findings, recommend remediation actions and coordinate with technical teams to resolve issues.
• Track remediation progress, validate closure evidence and elevate critical or overdue findings.

4. Security Compliance & Governance

• Support compliance assessments against government cybersecurity policies and security requirements.
• Assist with risk assessments, security exceptions, audit evidence and remediation tracking.
• Maintain cybersecurity documentation, SOPs, checklists and compliance records.
• Identify opportunities for process improvement and security automation.

5. Reporting & Stakeholder Coordination

• Prepare regular cybersecurity reports covering cloud security posture, go-live readiness, compliance gaps and remediation progress.
• Work closely with system owners, infrastructure teams and vendors.
• Provide technical guidance on AWS/Azure security configurations and vulnerability remediation.

Requirements

• Diploma or Degree in Cybersecurity, Computer Science, IT or a related field.
• Azure Security Engineer Associate (AZ-500) or equivalent certification strongly preferred.
• AWS Security, CISSP, CCSP, CISM or CRISC certifications are advantageous.
• Hands‑on experience with Microsoft Azure security administration, including Azure RBAC, Entra ID, Azure Policy and privileged access management.
• Ability to support AWS cloud security configurations.
• Experience with Microsoft Defender for Cloud or equivalent CSPM tools.
• Good understanding of cloud security, IAM, network security, encryption, vulnerability management and compliance.
• Ability to interpret security assessment reports, system architecture diagrams and technical remediation evidence.
• Familiarity with cybersecurity operations, access management, change requests and risk tracking.

Good to have

• Knowledge of AWS Security Hub.
• Experience with Azure Log Analytics, Azure Workbooks or similar reporting tools.
• Exposure to cybersecurity go‑live assessments, VAPT, system hardening and risk assessments.
• Scripting or automation experience for security reporting and remediation tracking.