Security Engineer (1-year renewable contract)

Evolution Recruitment Solutions Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Evolution Recruitment Solutions Pte Ltd seeks a Cloud Security Engineer to validate and implement controls across cloud platforms, align with security architecture, and drive remediation.

You will work with Security Architects, apply DevSecOps practices, and monitor IAM, encryption, logging, and compliance against standards such as NIST and ISO 27001 in a Singapore tech environment.

Qualifications

• Min 3 years in Cloud Security or related role.
• Strong understanding of GCP and/or Azure.
• Hands-on experience implementing, configuring and validating cloud security controls.
• Knowledge of security frameworks such as NIST, CIS, and ISO 27001.

Responsibilities

• Perform security control validation and effectiveness testing across cloud platforms.
• Develop, implement, and maintain cloud security controls in line with security standards.
• Apply security-by-design principles across cloud infrastructure and apps.
• Assess cloud environments against internal policies and regulatory requirements.
• Configure and manage cloud-native security services, IAM, monitoring, and automation tools.
• Review cloud configurations for weaknesses and remediation actions.
• Collaborate with Security Architects to translate requirements into controls and procedures.
• Support vulnerability management activities including remediation tracking.
• Participate in cloud security risk assessments and mitigations.
• Conduct security control reviews for new cloud services and deployments.
• Maintain cloud security standards, procedures, and technical documentation.
• Support incident investigations with technical expertise during containment and remediation.
• Automate controls, compliance checks, monitoring, and reporting where possible.
• Stay updated on cloud security threats and best practices to improve posture.

Skills

Cloud Security

GCP/Azure

IaC

DevSecOps

Vulnerability Management

Security Audits

Security Documentation

Communication

CI/CD

Tools

Terraform

CI/CD tooling

Security assessment tools

Job description

Key Responsibilities

• Perform security control validation and effectiveness testing across cloud platforms and services.
• Develop, implement, and maintain cloud security controls in alignment with approved security architecture and organisational security standards.
• Apply security-by-design principles across cloud infrastructure, applications, and technology implementations.
• Assess cloud environments against internal security policies, security baselines, and regulatory requirements, identifying compliance gaps and areas for improvement.
• Configure and manage cloud-native security services, IAM, monitoring capabilities, and security automation tools.
• Review cloud configurations to identify security weaknesses, misconfigurations, vulnerabilities, and compliance gaps, and drive appropriate remediation.
• Collaborate with Security Architects and technology teams to translate security requirements and architectural designs into practical technical controls and operational procedures.
• Support vulnerability management activities, including remediation tracking, risk assessment, and validation of corrective actions.
• Participate in cloud security risk assessments and recommend appropriate risk mitigation measures.
• Conduct security control reviews for new cloud services, infrastructure deployments, applications, and technology implementations.
• Develop and maintain cloud security standards, procedures, guidelines, and technical documentation.
• Support security incident investigations, providing technical expertise during containment, remediation, and post-incident activities.
• Automate security controls, compliance checks, monitoring, and reporting where practical.
• Stay up to date with emerging cloud security threats, vulnerabilities, technologies, and industry best practices, recommending improvements to the organisation's cloud security posture.

Key Requirements

• Min 3 years of experience in Cloud Security, Cybersecurity, Infrastructure Security, or a related security engineering role.
• Strong understanding of cloud security principles, architectures, and security controls across Google Cloud Platform (GCP) and/or Microsoft Azure.
• Hands‑on experience implementing, configuring, and validating cloud security controls.
• Strong knowledge of cloud‑native security services, IAM, network security, encryption, logging, monitoring, and security operations.
• Good understanding of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800‑53, CIS Benchmarks, ISO 27001, and MAS TRM.
• Experience with vulnerability management, security assessments, configuration reviews, and security assessment tools.
• Hands‑on experience with Infrastructure as Code (IaC) and familiarity with DevSecOps and integrating security into CI/CD pipelines.
• Experience with cloud security automation, compliance monitoring, or security tooling is an advantage.
• Strong analytical, problem‑solving, troubleshooting, and security risk assessment skills.
• Ability to analyse technical security findings, assess their business impact, and recommend appropriate remediation.
• Strong communication and documentation skills, with the ability to clearly communicate security risks and technical findings to both technical and non‑technical stakeholders.