IT Security Specialist (Cloud)

sggovterp; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

sggovterp is seeking a skilled Cloud Security Specialist to safeguard our cloud environments across AWS, Azure, and Google Cloud. You will design, implement, and maintain security measures in collaboration with cross-functional teams.

You will manage cloud security strategy, enforce policies, and respond to incidents. This role emphasizes IaC security, automation, and ongoing compliance with industry best practices.

Qualifications

• 2+ years designing, implementing, and managing security in cloud environments.
• Understand cloud security principles including network security, encryption, IAM and monitoring.
• Implemented security within IaC frameworks (Terraform, CloudFormation, Ansible) to ensure secure provisioning.
• Good to have: CCSP, CISSP, AWS Certified Security – Specialty or equivalent.
• Proficient in scripting (Python/PowerShell) for automation.
• Experience with containerisation (Docker, Kubernetes, AWS ECS) and CI/CD security tooling.

Responsibilities

• Review, update, and enforce cloud security policies and architecture designs.
• Identify security gaps in cloud environments and evaluate mitigations or third‑party solutions.
• Design and implement secure cloud infrastructure to support new deployments.
• Maintain IaC using Terraform or CloudFormation and apply policy changes.
• Build and maintain automation scripts to streamline provisioning, configuration management, and incident response.
• Support audit and compliance activities with evidence of controls and detailed reports.
• Monitor security incidents, assist investigations, and implement remediation measures.
• Perform timely patching according to remediation timelines.
• Communicate findings and remediation plans to stakeholders, and create management reports.
• Analyse security metrics and trends for reporting to management.

Skills

Cloud security

Threat detection

Identity and access management

Security monitoring

Automation

Tools

Terraform

CloudFormation

Ansible

Docker

Kubernetes

AWS ECS

Git

GitLab

Jenkins

SAST

DAST

SCA

Job description

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

What you will be working on

Strategic Cloud Security Management :

• Review, update, and enforce cloud security policies and architecture designs to align with current threat landscape, regulatory requirements, and industry best practices .
• Identify current security gaps present in the cloud environments . Conduct stud ies on appropriate mitigation measures and/or evaluation of third- party solutions to propose for implementation.

Cloud Security Operations & Response :

• Design and implement cloud infrastructure to support new implementations.
• Maintain Infrastructure-as-Code solutions using tools such as Terraform or CloudFormation. Perform configuration changes to comply to new policies introduce d.
• Build and maintain automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.
• Support audit and compliance activities by maintaining evidence of security controls, conducting security assessments, and preparing detailed compliance reports .
• Monitor and respond to security incidents, assist with investigations , and implement remediation measures .
• Perform patching promptly according to remediation timelines.
• Perform regular monitoring and c ommunicate with stakeholders to remediate or mitigate cloud related findings from d ashboards and alerts .
• Analyse security metrics and trends to create reports for management reporting.

What we are looking for

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).
• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.
• Have implemented security best practi ces within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation , Ansible ) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security - Specialty, or equivalent.
• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.
• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.
• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.