Senior Cloud Security Architect — GRC & DevSecOps

Merquri; Singapore; On-site; SGD 130,000 - 180,000; Full time

Job summary

Merquri is seeking a Senior Cloud Security Specialist to strengthen our cloud security posture. This hands-on role covers cloud security engineering and configuration, backed by a good understanding of GRC and code security to engage with application teams.

You will secure infrastructures across cloud platforms, lead incident response, and embed guardrails into provisioning pipelines while communicating risk to technical and leadership stakeholders.

Qualifications

• 6–10+ years in cybersecurity with 4+ years in cloud security engineering or architecture.
• Hands-on experience securing AWS, Azure, or GCP; multi-cloud is a plus.
• Understanding of GRC concepts and major frameworks (ISO 27001, SOC 2, NIST).

Responsibilities

• Design and maintain cloud security controls (IAM, network, encryption, logging, monitoring).
• Harden configurations and manage cloud security tooling (CSPM, CWPP, SIEM integrations).
• Review IaC and container/serverless workloads pre-deployment (Terraform, CloudFormation, Ansible; Kubernetes, Lambda).
• Lead incident response for cloud security events and remediation.
• Embed security guardrails into pipelines with DevSecOps—security by design.

Skills

Cloud security engineering

GRC frameworks understanding

IaC security

DevSecOps collaboration

Threat modelling

Communication skills

Security tooling

Tools

Veracode

CodeQL

SonarQube

Snyk Code

Terraform

CloudFormation

Job description

Merquri is seeking a Senior Cloud Security Specialist to strengthen our cloud security posture. This hands-on role covers cloud security engineering and configuration, backed by a good understanding of GRC and code security to engage with application teams.

You will secure infrastructures across cloud platforms, lead incident response, and embed guardrails into provisioning pipelines while communicating risk to technical and leadership stakeholders.