IT Security Specialist (Cloud)

Housing and Development Board; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

Housing and Development Board is recruiting a Cloud Security Specialist to safeguard cloud-based systems and applications. You will design, implement and maintain secure cloud architectures and IaC pipelines, collaborating with cross-functional teams across AWS/Azure/GCP environments.

The role emphasizes security policy enforcement, incident response, audits, and continuous monitoring with a focus on resilience and compliance in a public-sector context.

Qualifications

• 2+ years of designing, implementing and managing security in cloud environments (AWS/Azure/GCP).
• Knowledge of cloud security principles: network security, encryption, IAM, monitoring.
• Implemented security best practices within IaC (Terraform/CloudFormation/Ansible).
• Scripting for security automation is a plus (Python/PowerShell).

Responsibilities

• Review and enforce cloud security policies and architectures.
• Identify gaps and evaluate mitigations or third-party solutions.
• Design and implement secure cloud infrastructure and IaC pipelines.
• Maintain automation tools for provisioning, config management and incident response.
• Support audits and compliance with evidence of controls and reports.
• Monitor security incidents and coordinate remediation with stakeholders.
• Perform timely patching and monitor dashboards and alerts.
• Create security metrics and management reports.

Skills

Cloud security

IAM governance

IaC (Terraform)

Security monitoring

Scripting (Python)

CI/CD security

Cloud platforms

Tools

Terraform

CloudFormation

Ansible

Docker

Kubernetes

Git

Jenkins

Job description

What the role is:

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

What you will be working on:

• Strategic Cloud Security Management:
• Review, update, and enforce cloud security policies and architecture designs to align with current threat landscape, regulatory requirements, and industry best practices.
• Identify current security gaps present in the cloud environments. Conduct studies on appropriate mitigation measures and/or evaluation of third-party solutions to propose for implementation.
• Cloud Security Operations & Response:
• Design and implement cloud infrastructure to support new implementations.
• Maintain Infrastructure-as-Code solutions using tools such as Terraform or CloudFormation. Perform configuration changes to comply to new policies introduce d.
• Build and maintain automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.
• Support audit and compliance activities by maintaining e evidence of security controls, conducting security assessments, and preparing detailed compliance reports.
• Monitor and respond to security incidents, assist with investigations, and implement remediation measures.
• Perform patching promptly according to remediation timelines.
• Perform regular monitoring and c communicate with stakeholders to remediate or mitigate cloud related findings from d dashboards and alerts.
• Analyse security metrics and trends to create reports for management reporting.

What we are looking for:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).
• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.
• Have implemented security best practi ces within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.
• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.
• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.
• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

About Housing and Development Board

We are Singapore's public housing authority and a statutory board under the Ministry of National Development. We take pride in creating homes and towns that form a quality living environment for the young and old. Throughout the years, our continuous innovation and upgrading programmes have ensured that the heartland remain our cherished home.Join us in making a difference to the heartlands and communities that matter to us. Take on the challenge of shaping the nation’s skyline and landscape. With the wide range of opportunities available in HDB, you play an integral part in redefining the future of public housing and improving the lives of Singaporeans.