IT Security Specialist (Cloud)

sggovterp; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

sggovterp is seeking a Cloud Security Specialist to design, implement and maintain security for cloud environments. You will work with cross-functional teams to uphold policy-aligned architecture and drive secure deployments across AWS, Azure, and GCP.

The role emphasizes incident response, compliance documentation, and automation through IaC tools like Terraform and CloudFormation. Candidates should have 2+ years of cloud security experience and strong IAM, network, and monitoring skills.

Qualifications

• 2+ years of experience designing and managing security in cloud environments.
• Understanding cloud security principles: network security, encryption, IAM, and monitoring.
• Experience applying IaC to secure infrastructure provisioning and configuration management.

Responsibilities

• Review and update cloud security policies and architectures to align with threat landscape and regulatory requirements.
• Identify security gaps in cloud environments and evaluate mitigations or third-party solutions.
• Design and implement cloud infrastructure to support new deployments.
• Maintain IaC solutions using Terraform or CloudFormation; apply policy changes.
• Develop automation scripts for provisioning, configuration, and incident response.
• Support audits and compliance by maintaining evidence and detailed reports.
• Monitor security incidents, assist investigations, and implement remediation.
• Perform timely patching according to remediation timelines.
• Analyze security metrics and produce management reports.

Skills

Cloud security design

Cloud platforms AWS

Cloud platforms Azure

Cloud platforms GCP

Identity and access management

Security monitoring

Infrastructure-as-Code

Tools

Terraform

CloudFormation

Ansible

Job description

What the role is

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

What you will be working on

Strategic Cloud Security Management:

• Review, update, and enforce cloud security policies and architecture designs to align with current threat landscape, regulatory requirements, and industry best practices.
• Identify current security gaps present in the cloud environments. Conduct studies on appropriate mitigation measures and/or evaluation of third-party solutions to propose for implementation.

Cloud Security Operations & Response:

• Design and implement cloud infrastructure to support new implementations.
• Maintain Infrastructure-as-Code solutions using tools such as Terraform or CloudFormation. Perform configuration changes to comply to new policies introduce d.
• Build and maintain automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.
• Support audit and compliance activities by maintaining evidence of security controls, conducting security assessments, and preparing detailed compliance reports.
• Monitor and respond to security incidents, assist with investigations, and implement remediation measures.
• Perform patching promptly according to remediation timelines.
• Perform regular monitoringand communicate with stakeholders to remediate or mitigate cloud related findings fromdashboards andalerts.
• Analyse security metrics and trends to create reports for management reporting.

What we are looking for

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).
• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.
• Have implemented security best practi ces within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.
• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.
• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.
• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.