Security Engineer (Banking, 1-year renewable contract)

Evolution Singapore; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Evolution Singapore is seeking a Cloud Security Engineer to validate security controls across cloud platforms and services in a dynamic environment. You will develop and maintain cloud security controls aligned with approved architecture and organisational standards.

You will apply security-by-design principles, assess environments against policies and regulatory requirements, and collaborate with Security Architects to translate designs into practical controls and procedures.

Qualifications

• 3–7 years of cloud security experience in security engineering.
• Strong knowledge of cloud security principles across GCP and/or Azure.
• Hands-on experience implementing and validating cloud security controls.
• Familiarity with IAM, network security, encryption, logging and monitoring.
• Experience with vulnerability management and security assessments.
• Understanding of frameworks like NIST, CIS, ISO 27001, MAS TRM.
• IaC and DevSecOps integration into CI/CD pipelines.

Responsibilities

• Perform security control validation across cloud platforms and services.
• Develop and maintain cloud security controls aligned to standards.
• Apply security-by-design principles across cloud environments.
• Assess environments against policies, baselines, and regulatory requirements.
• Configure and manage cloud-native security services and IAM.
• Review configurations for weaknesses and drive remediation.
• Collaborate with architects to translate designs into controls and procedures.
• Support vulnerability management, remediation tracking, and risk assessment.
• Participate in cloud security risk assessments and mitigation.
• Conduct security control reviews for new services and deployments.
• Develop and maintain cloud security standards and technical docs.
• Support incident investigations with technical expertise.
• Automate controls, checks, monitoring and reporting where possible.
• Stay updated on cloud security threats and best practices.

Skills

Cloud security

Security engineering

Vulnerability management

DevSecOps

Risk assessment

Security operations

IAM and access controls

Monitoring and logging

Automation

Strong communication

Tools

IaC tools

Security tooling

CI/CD pipelines

Vulnerability scanning tools

Job description

• Perform security control validation and effectiveness testing across cloud platforms and services.
• Develop, implement, and maintain cloud security controls in alignment with approved security architecture and organisational security standards.
• Apply security-by-design principles across cloud infrastructure, applications, and technology implementations.
• Assess cloud environments against internal security policies, security baselines, and regulatory requirements, identifying compliance gaps and areas for improvement.
• Configure and manage cloud-native security services, IAM, monitoring capabilities, and security automation tools.
• Review cloud configurations to identify security weaknesses, misconfigurations, vulnerabilities, and compliance gaps, and drive appropriate remediation.
• Collaborate with Security Architects and technology teams to translate security requirements and architectural designs into practical technical controls and operational procedures.
• Support vulnerability management activities, including remediation tracking, risk assessment, and validation of corrective actions.
• Participate in cloud security risk assessments and recommend appropriate risk mitigation measures.
• Conduct security control reviews for new cloud services, infrastructure deployments, applications, and technology implementations.
• Develop and maintain cloud security standards, procedures, guidelines, and technical documentation.
• Support security incident investigations, providing technical expertise during containment, remediation, and post-incident activities.
• Automate security controls, compliance checks, monitoring, and reporting where practical.
• Stay up to date with emerging cloud security threats, vulnerabilities, technologies, and industry best practices, recommending improvements to the organisation's cloud security posture.

Key Requirements

• 3–7 years of experience in Cloud Security, Cybersecurity, Infrastructure Security, or a related security engineering role.
• Strong understanding of cloud security principles, architectures, and security controls across Google Cloud Platform (GCP) and/or Microsoft Azure.
• Hands-on experience implementing, configuring, and validating cloud security controls.
• Strong knowledge of cloud-native security services, IAM, network security, encryption, logging, monitoring, and security operations.
• Good understanding of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.
• Experience with vulnerability management, security assessments, configuration reviews, and security assessment tools.
• Hands-on experience with Infrastructure as Code (IaC) and familiarity with DevSecOps and integrating security into CI/CD pipelines.
• Experience with cloud security automation, compliance monitoring, or security tooling is an advantage.
• Strong analytical, problem-solving, troubleshooting, and security risk assessment skills.
• Ability to analyse technical security findings, assess their business impact, and recommend appropriate remediation.
• Strong communication and documentation skills, with the ability to clearly communicate security risks and technical findings to both technical and non-technical stakeholders.