Security Engineer, Banking (1-year renewable contract)

EVOLUTION RECRUITMENT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

EVOLUTION RECRUITMENT SOLUTIONS PTE. LTD. is seeking an experienced Cloud Security Specialist to validate and implement security controls across cloud platforms.

You will align controls with approved security designs and support security-by-design across infrastructure and applications. The role requires 3-7 years in cloud/cyber/infrastructure security, with strong knowledge of cloud-native services, IAM, encryption, and monitoring.

Qualifications

• 3-7 years of experience in cloud security, cyber security, or infrastructure security roles.
• Strong understanding of cloud security architectures across Google Cloud Platform or Azure.
• Experience implementing and validating cloud security controls.
• Knowledge of cloud-native security services, IAM, network security, encryption, logging, and monitoring technologies.
• Understanding of security frameworks such as NIST CSF, NIST SP 800-53, CIS Benchmarks, ISO 27001, MAS TRM.
• Experience with vulnerability management and security assessment tools.
• Proficient in developing Infrastructure as Code (IaC) and familiarity with DevSecOps security practices.

Responsibilities

• Perform security control validation and effectiveness testing across cloud platforms and services.
• Develop, implement, and maintain cloud security controls aligned with security designs.
• Support security-by-design across cloud infrastructure and applications.
• Assess cloud environments against internal policies, baselines, and regulatory requirements.
• Configure and manage cloud-native security services, monitoring, and automation tools.
• Review configurations for weaknesses, misconfigurations, and gaps.
• Collaborate with Security Architects to translate requirements into controls and procedures.
• Support vulnerability management including remediation tracking and validation.
• Participate in cloud security risk assessments and mitigation recommendations.
• Conduct reviews for new cloud services and deployments.
• Develop security standards, procedures, and documentation.

Skills

Cloud security

Security testing

Vulnerability assessment

IaC familiarity

DevSecOps

Regulatory compliance

Security documentation

Tools

Terraform

Job description

Please note that visa sponsorship is not available at this time.

• Perform security control validation and effectiveness testing across cloud platforms and services.
• Develop, implement, and maintain cloud security controls in alignment with approved security architecture designs.
• Support the implementation of security-by-design principles across cloud infrastructure and applications.
• Assess cloud environments against internal security policies, security baselines, and regulatory requirements.
• Configure and manage cloud-native security services, monitoring capabilities, and security automation tools.
• Review cloud configurations and identify security weaknesses, misconfigurations, and compliance gaps.
• Collaborate with Security Architects to translate security requirements into technical controls and operational procedures.
• Support vulnerability management activities, including remediation tracking and validation of corrective actions.
• Participate in cloud security risk assessments and recommend risk mitigation measures.
• Conduct security control reviews for new cloud services, infrastructure deployments, and technology implementations.
• Develop security standards, procedures, and technical documentation related to cloud security.
• Support security incident investigations and provide technical expertise during containment and remediation activities.
• Automate security checks, compliance monitoring, and reporting wherever practical.
• Monitor emerging cloud security threats, vulnerabilities, and industry best practices, recommending improvements as necessary.

3-7 years of experience in cloud security, cyber security, or infrastructure security roles.

## RESTRICTED ##

• Strong understanding of cloud security principles and architectures across Google Cloud Platform or Azure.
• Experience implementing and validating cloud security controls.
• Knowledge of cloud-native security services, IAM, network security, encryption, logging, and monitoring technologies.
• Understanding of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.
• Experience with vulnerability management and security assessment tools.
• Proficient in developing Infrastructure as Code (IaC) and familiarity with DevSecOps security practices.
• Strong analytical, problem-solving and troubleshooting skills.
• Ability to document technical findings and communicate security risks effectively to technical and non-technical stakeholders.