G01 - IT Security Officer

FPT Asia Pacific; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

FPT Asia Pacific is seeking a seasoned Cloud Security Engineer to design and implement secure cloud architectures and lead risk mitigation across products. You will integrate security into CI/CD pipelines, collaborate with product and platform teams, and drive security-by-design initiatives.

The role requires 5–7 years in cloud platform or cloud security engineering, strong IaC and automation skills, and the ability to communicate complex concepts to both technical and non-technical

Qualifications

• Hands-on design, implementation, and troubleshooting of cloud security architectures.
• Experience with IaC and automation tools to deploy and manage security controls.
• Experience in threat modelling and risk mitigation across cloud environments.
• Proficiency with IAM, KMS, logging/telemetry and secure access controls.
• Familiarity with CI/CD security and secure DevOps practices.

Responsibilities

• Design and implement secure cloud architectures aligned with best practices.
• Contribute to centralized cloud security capabilities across systems under the CISO's remit.
• Lead threat modelling exercises and define risk mitigation strategies.
• Review vulnerability management findings and translate them into remediation plans.
• Configure and manage security services and controls across cloud platforms.
• Define and implement logging and security telemetry collection for workloads.
• Act as an embedded security engineer within product teams.
• Embed security-by-design principles into architectures, CI/CD pipelines and practices.

Skills

Cloud security engineering

Threat modelling

IAM and KMS management

Infrastructure as Code

CI/CD security

Cloud posture management

Security telemetry & logging

Containers/serverless security

Automation tooling

Independent contributor collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Job description

• Design and implement secure cloud architectures aligned with best practices.
• Contribute to centralized cloud security capabilities across systems under the CISO's remit.
• Lead threat modelling exercises and define risk mitigation strategies.
• Review vulnerability management and penetration testing findings, and translate them into actionable remediation plans.
• Configure and manage AWS security services (e.g., IAM, KMS, certificate management).
• Define and implement logging and security telemetry collection for AWS workloads, integrating with security analytics and observability platforms.
• Act as an embedded security engineer within product teams.
• Design and recommend security controls that balance protection, usability, and delivery speed.
• Embed security‑by‑design principles into architectures, CI/CD pipelines, and engineering practices.
• Improve security posture of existing systems by identifying control gaps, prioritizing remediation, and implementing sustainable fixes.
• Perform scoped penetration testing to validate key controls and identify weaknesses.
• Define and implement automated security checks (e.g., IaC scanning, cloud posture management, CI/CD policy enforcement).
• Translate security requirements into controls as code (e.g., Terraform modules, policy‑as‑code, guardrails).
• Continuously enhance controls and automation based on emerging threats, incidents, and evolving requirements.
• Collaborate with product, engineering, and platform teams to design secure solutions and resolve trade‑offs.
• Communicate complex security concepts clearly to both technical and non‑technical stakeholders.
• Provide regular updates to the CISO on risks, residual issues, and progress on security improvements.

Provide clear, actionable guidance on cloud and infrastructure design, including:

• Account and landing zone architecture
• Identity and access management (IAM)
• Data protection, logging, monitoring, and workload security

Requirements

• 5–7 years of experience in cloud platform or cloud security engineering, with hands‑on involvement in design, implementation, and troubleshooting.
• Strong expertise in cloud security, including networking, IAM, KMS/BYOK, logging/telemetry, containers/serverless, and CI/CD security.
• Proficiency in Infrastructure as Code (IaC) and automation tools for implementing and managing security controls.
• Experience with automated control validation (e.g., cloud posture management, IaC scanning, CI/CD‑integrated checks).
• Familiarity with implementing controls as code in collaboration with engineering teams.
• Strong problem‑solving skills with a pragmatic, outcome‑driven mindset.
• Ability to work closely with engineering teams while operating as an independent contributor.
• Strong communication skills to engage both technical and non‑technical stakeholders.
• Cloud Solutions Architect and/or Cloud Security certifications are preferred.