Senior Cloud Security & Governance Engineer

DSTA; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

DSTA in Singapore is seeking an experienced engineer to lead cloud security and governance, embedding security controls into cloud architectures to ensure secure by design and compliant by default.

You will collaborate with cloud platform and product teams, review architectures, guide teams on secure cloud patterns, and mentor engineers, while supporting security audits and risk management.

Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering or a related field.
• At least 6 years of cybersecurity experience across IT networking, infrastructure, platforms, and/or cloud ecosystems, with 2 years of hands-on cloud security experience.

Responsibilities

• Define and maintain cloud security standards, baselines, and guardrails.
• Lead security reviews of cloud architectures, designs, and configurations.
• Assess and strengthen controls across identity, network, data protection, logging, and monitoring.
• Identify cloud security risks, vulnerabilities, control gaps and recommend remediation.
• Support security audits, inspections, and assurance activities.
• Advise teams on secure cloud patterns, threat mitigation, and approved security services.
• Mentor engineers and architects on cloud security best practices.
• Investigate recurring security or compliance issues and drive systemic improvements.

Skills

Cloud IAM

Network security

Data protection

Security logging

Governance & risk

Vulnerability assessments

Security requirements

Communication skills

Education

Bachelor's or Master's degree in Computer Science, Engineering or a related field

Tools

DevSecOps tools

CI/CD security

SAST/DAST

OWASP

Job description

DSTA in Singapore is seeking an experienced engineer to lead cloud security and governance, embedding security controls into cloud architectures to ensure secure by design and compliant by default.

You will collaborate with cloud platform and product teams, review architectures, guide teams on secure cloud patterns, and mentor engineers, while supporting security audits and risk management.