Senior Security Engineer - Automate Cloud Security at Scale

gxs; Singapore; Sur place; SGD 120 000 - 170 000; Plein temps

Résumé du poste

The Bank’s security engineering team is seeking a Senior Security Engineer who will build security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.

You will work across cloud, DevSecOps, cryptography, privileged access management, and automated response, focusing on real-time vulnerability identification and automated remediation in a public cloud program.

Qualifications

• 5–7+ years of experience in security engineering or a similar role.
• Experience with scripting or programming for automation (Go, Python).
• Experience with container platforms (AWS EKS, Docker, Kubernetes).
• Understanding of CIS, NIST 800-53, PCI-DSS controls.
• Knowledge of cloud security concepts and cloud-native security services.
• Strong communication and collaboration skills.

Responsabilités

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by integrating commercial security tools and scanners
• Collaborate with experienced security engineers and engineering squad leads to research and build scalable solutions
• Evaluate, extend and contribute to existing open-source security tools and integrate them into pipelines
• Design and implement automated security scanning for cloud infrastructure as code, including Terraform Sentinel policies

Connaissances

Cloud security

Security automation

Go

Python

Open-source tooling

Outils

Terraform

Kyverno

Sentinel

Docker

Kubernetes

Description du poste

The Bank’s security engineering team is seeking a Senior Security Engineer who will build security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.

You will work across cloud, DevSecOps, cryptography, privileged access management, and automated response, focusing on real-time vulnerability identification and automated remediation in a public cloud program.