Total 3,020 Full-time security analyst job vacancies in Australia

Responsibilities:

KYC and Due Diligence

• Conduct thorough KYC due diligence on new individual and corporate clients.
• Review and validate client documents (passports, proof of address, corporate documents, trust deeds, source of wealth statements, etc.).
• Perform background screening using internal tools and third-party databases.
• Identify and escalate any potential red flags (e.g., PEPs, sanctions exposure, adverse media hits).

Client Onboarding Support

• Act as the key point of contact for Relationship Managers during the onboarding process.
• Guide front office teams on KYC requirements and ensure complete and accurate submissions.
• Ensure timely onboarding of clients while maintaining compliance with internal SLAs.

Data Entry and System Management

• Accurately input and maintain client data in internal systems (e.g., Avaloq, CRM tools).
• Update client KYC profiles and risk ratings during the onboarding process

Risk and Compliance Control

• Ensure that all onboarding activities comply with AML laws, FATCA/CRS requirements, sanctions rules, and internal policies.
• Support periodic quality assurance reviews and internal/external audits related to onboarding and KYC files.
• Maintain strong records and audit trails for all KYC and onboarding actions.

Process Improvement

• Propose improvements to the onboarding workflow to enhance efficiency and client experience.
• Participate in projects related to onboarding process upgrades or regulatory changes.

Requirement:

• Bachelor’s degree in business, Finance or related field.
• 2–5 years of KYC/AML experience, preferably within private banking or wealth management.
• Experience with onboarding high-net-worth (HNW) and ultra-high-net-worth (UHNW) clients is a plus.
• Fluent and comfortable conversing in English (Mandarin & Cantonese is a plus) to communication with external clients.
• Good stakeholder management skills.
• Strong time management, organizational, planning and follow-up skills.
• Ability to work independently and manage high volumes under tight deadlines.
• Strong interpersonal and communication skills to work with front office and compliance teams.
• Proficiency with Microsoft Office and familiarity with banking platforms and screening tools.

Note: Successful candidates need to be comfortable with working on weekends and shifts as and when required

Responsibilities:

• Provide support and maintenance for insurance-related applications on the AS400 platform.
• AS400 Application Support
• Able to provide maintenance support
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Strong analytical and problem-solving skills
• Hands-on experience with AS400/IBM i
• Knowledge of Smart400
• Experience with PolisyAsia/Polisy400
• BusinessObjects (BO) development experience

Good to Have:

• Experience in Web Services/REST API development
• Exposure to Smart Upgrade
• Understanding of General Insurance business processes
• Willingness to work onsite and coordinate with business stakeholders
• Relevant experience in AS400 application support and insurance domain preferred.

Interested applicants, please email your resume to Karin Chan Wei Kien

Email: karinchan@recruitexpress.com.sg

CEI Reg No: R1104584

Recruit Express Pte Ltd

UEN: 199601303W

EA Licence No: 99C4599

Job Description:

Monitor and control access at the main gate, lobby, and loading bay, ensuring only authorized personnel, vehicles, and visitors enter the premises.

Conduct regular patrols of the building exterior, car park, and common facilities .

Operate and monitor CCTV systems, alarm panels, and access control equipment.

Maintain accurate visitor, delivery, and contractor logs.

Attend to car park matters, including assisting drivers and reporting any gantry or ticketing system issues to the supervisor or maintenance personnel.

Identify and report any safety or security hazards and respond promptly to suspicious activities or incidents.

Assist in emergency situations such as fire alarms or evacuations in accordance with site protocols.

Prepare and submit daily occurrence reports and incident records to the Security Supervisor or Property Management.

Provide assistance and directions to tenants, staff, and visitors when required.

Summary

The Security Executive supports the Assistant Security Manager and the Head of Safety, Security, and

Compliance in day-to-day operations.

Reporting to the Assistant Security Manager, he/she will work closely with all departments in the

company, including outsourced security vendors. He/she will assist the Assistant Security Manager in

ensuring that aviation security measures are met.

Duties and Responsibilities

• Assist in ensuring dnata adheres to APD Security Directives.

• Manage access control systems and processes.

• Conduct investigations into security breaches and incidents.

• Assist in reviewing and updating Standard Operating Procedures (SOPs) to meet regulatory requirements.

• Assist in conducting security risk assessments to identify and address key risk areas.

• Enforce a security culture through engagement with business units.

• Identify and escalate breaches or concerns related to security, procedures, or systems.

• Issue staff passes and access rights for employees and contractors; ensure timely revocation and retrieval of passes upon resignation, and manage the secure disposal of access credentials.

• Support security incident response in the absence of the Assistant Security Manager.

• Oversee dnata Security Systems, including CCTV, EM Locks, drop arm barriers, and intrusion alarm systems.

• Issue parking decals for dnata staff and contractors; ensure accurate data submission to the finance department on a monthly basis for billing purposes.

• Assist in preparing and presenting security reports as needed.

• Conduct regular security checks and audits.

• Ensure 24/7 shift security deployment coverage across Catering, Cargo, and the

Maintenance Base.

• Oversee 24/7 shift security coverage for all dnata contracted flights, including standard and non-standard services.

• Assist with airline/regulatory security audits of dnata operations.

• Address security findings from audits by ensuring timely closure of issues and integrating resolutions into operational processes and policies to enhance overall security effectiveness.

• Assist in developing and reviewing dnata’s Business Continuity Management Manual.

• Participate in emergency exercises organized by external stakeholders.

• Assist in developing and maintaining a training framework for staff on emergency response and business continuity.

• Assist in executing business continuity and resilience awareness initiatives.

• Assist in reviewing and updating corporate crisis plans and policies.

• Execute incident management plans for coordinated crisis response.

• Assist with additional duties as required.

Requirements

• Minimally attained Diploma/NITEC from a recognized tertiary institution

• Preferably with minimum 2 years’ experience with security policy work.

• Crisis Management & Business Continuity Management experience is appreciated

• Proficient in Microsoft Office Applications; Excel, Word, PowerPoint

• Preferably with Aviation background

• Preferably possess Class 3 driving license and be able to attain Airfield Driving Permit (ADP

The Reference Data Specialist is responsible for instructions of client deliverables, coding and data input validation focusing on specific industry/category or set of categories (e.g. Beverages, Food, Health and Beauty Products). As a Reference Data Specialist  at NielsenIQ, you create and deliver client outputs in a correct and timely manner.

• Responsible for instructions of client deliverables, coding and data input validation focusing on specific industry/category or set of categories.
• Does cross coding and item-related quality checks on a daily basis
• May act as a back-up to other coders when needed; Keep track/document special instructions related to category assignment
• Plan and execute a complex daily personal workload and support to meet departmental and company schedules
• Ensure accuracy throughout the process, from validation before database setup to managing samples, and identify areas for improvement
• Answer external questions and act as a liaison with everyone from clients to stakeholders; To be able to identify, investigate and coordinate the resolution of data, process, or product related queries
• Willing to be trained to be a category expert

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

About the Role

We are looking for a proactive, self-motivated, and resourceful Digital Business Analyst to join our dynamic team. In this role, you will act as a critical bridge between technology and business, supporting the Chief Information Officer (CIO) and collaborating with cross-functional teams.

Key Responsibilities

• Requirement Elicitation & Prototyping: Map citizen/business service journeys, gather requirements, and build rapid prototypes to validate business cases and measure value.

• Product Ownership Assistance: Translate business needs into clear user stories, technical specifications, and acceptance criteria. Help define the product vision, roadmap, and strategic objectives.

• Tech Evaluation & AI Innovation: Actively experiment with and evaluate emerging technologies (including AI tools) to ensure alignment with GovTech’s technology directions and Whole-of-Government (WOG) central solutions.

• Agile & Project Delivery: Identify and implement appropriate project methodologies (Agile, Waterfall) tailored to project environments. Ensure smooth system deployment readiness and perform post-change impact analysis.

• Strategic Advisory: Support the CIO in identifying high-impact digital transformation opportunities and use data-driven insights to guide product strategies.

Job Requirements

Minimum Qualifications

• Education: Bachelor’s Degree in a relevant IT or Technology discipline.

• Experience: Minimum of 4+ years of hands-on experience in IT business analysis, solution design, and testing.

• Product Lifecycle: Proven track record of participating in at least one full software/product development lifecycle (Agile environment highly preferred).

• Technical Agility: Ability to code and iterate prototypes live during planning sessions and lead collaborative workshops.

• Soft Skills: Outstanding analytical, problem-solving, stakeholder management, and influencing skills; comfortable engaging with users across all levels.

Preferred Skills & Certifications

• Professional Business Analysis certification (e.g., CBAP).

• Certified Scrum Master or Product Owner is a strong advantage.

• Prior experience in IT consulting, software development, Service Design, or Knowledge Management.

Good-to-Have (Bonus Points)

• Tech Stack Familiarity: Basic exposure to modern web technologies (React, JavaScript, Python, Java, or .NET/C#).

• GovTech Ecosystem: Familiarity with government development tools, CI/CD concepts, and workflows (such as SHIP/HATS, GitHub, or GitLab).

• Collaboration Tools: Experience working with Agile and design tools like JIRA, Figma, or Miro.

• Modern Platforms: Exposure to Rapid Application Development (RAD) platforms like OutSystems, or Content Management Systems (e.g., Sitefinity, SharePoint Online).

• Data analytics capabilities and familiarity with product metrics.

Pre-requisition:

·      Diploma or Degreein Information Technology, Computer Engineering, Network Engineering or related fields.

·       1-3years relevant working experience

·       Knowledge of Servers, operating system concepts, storage and backup fundamentals, and virtualization would be an advantage.

·       Basic understanding of Infrastructure as Code (IaC) concepts would be an advantage.

Job Description:

·      Assistin the installation, configuration, and maintenance of servers, virtualization platforms, storage systems, backup solutions, and supporting infrastructure.

·      Support daily infrastructure operations, monitoring, and health checks.

·      Perform basic troubleshooting for server, virtualization, operating system, storage, and backup-related issues.

·      Escalatecomplex incidents to senior engineers or vendors where required.

·      Assistin infrastructure deployment, migration, and upgrade activities.

·      Monitor infrastructure alerts and respond to incidents in a timely manner.

·      Maintain accurate documentation including system diagrams, configurations, SOPs, asset inventory, and operational procedures.

·      Work with internal teams, vendors, and customers during troubleshooting and implementation activities.

·      Support system testing activities such as SAT, UAT, backup recovery testing, and failover testing where required.

·      Ensure compliance with security policies, operational procedures, and change management processes.

·      Participate in standby support rotation and after-office-hours support activities when required.

·      Support automation and continuous improvement initiatives for infrastructure operations and monitoring.

Technical Skill Sets:

OS / Hypervisors:                         VMware vSphere / ESXi, MicrosoftHyper-V, Windows Server, Linux
Server Hardware:                         Dell PowerEdge, HPE ProLiant
Storage Systems:                          SAN (Fibre Channel/iSCSI), NAS(NFS/SMB)
Protocols:                                       TCP/IP, DNS, DHCP
Backup Software:                         VeeamBackup & Replication
Scripting Languages:                    Python,Bash, PowerShell
Provisioning & Configuration:    Infrastructureas Code (IaC), Monitoring systems, Configuration Management
CloudConcepts:                            IaaS(Infrastructure as Service), Hybrid Cloud, Public Cloud (AWS/Azure/GCP)

Pre-requisition

• Diploma in Business, Human Resource Management, or equivalent
• More than 3 years of experience in in-house or agency recruiting, preferably with proven success hiring technical functions
• Self-motivated and adaptable to deliver results under pressure
• Ability to work independently with minimal supervision and collaborate effectively as a team player
• Strong interpersonal, written, and verbal communication skills
• Meticulous attention to detail

Job Responsibilities

• Manage full-cycle recruitment processes to ensure a smooth and positive candidate experience from sourcing to onboarding
• Develop and execute sourcing strategies using job portals, LinkedIn, referrals, and direct outreach to attract qualified candidates
• Support campus recruitment and career fairs to build employer brand and attract emerging talent
• Collaborate with hiring managers to understand job requirements, scopes, and hiring timelines for effective recruitment planning
• Build and maintain talent pipelines for current and future technical roles to ensure readiness for hiring needs
• Collect and analyze recruitment data and reports to identify trends and recommend process improvements
• Maintain accurate applicant tracking system (ATS) data and recruitment documentation to ensure compliance and efficiency
• Communicate professionally and responsively with candidates and internal stakeholders throughout the recruitment process

About the Role

Ishver International is seeking proactive and analytical individuals to join our team as Business Events Analysts. In this role, you will support the execution of marketing events and customer engagement campaigns while gathering valuable market insights to help improve campaign performance. You'll work directly with customers, represent leading brands, and contribute to business growth through face-to-face interactions.

Key Responsibilities

• Support the planning and execution of marketing events and promotional campaigns.
• Engage customers through face-to-face interactions and brand activations.
• Represent client brands professionally at events and roadshows.
• Gather customer feedback and market insights to evaluate campaign effectiveness.
• Track campaign performance and identify opportunities for improvement.
• Collaborate with team members to achieve campaign objectives.
• Contribute ideas that enhance customer engagement and business growth.

Requirements

• Diploma/Nitec or equivalent (preferred but not mandatory)
• 0–2 years of experience in sales, marketing, businessdevelopment, or customer service
• Strong communication and interpersonal skills
• Organised, detail-oriented, and able to multitask
• Positive attitude with willingness to learn and grow
• Comfortable working in a fast-paced, event-based environment

What We Offer

• Competitive remuneration package with performance-based incentives
• Structured on-the-job training and mentorship
• Clear career progression pathway within the organization
• Exposure to client acquisition strategies and campaign management
• Collaborative and supportive team culture
• Overseas travelling and expansion opportunities

About Us

Ishver International specializes in integrated marketing and direct engagement strategies. We help businesses expand their reach and connect with their target audience through impactful campaigns and customer-focused solutions.

Job Description & Requirements

Position Summary

We are seeking a highly skilled Network Security Engineer with Subject Matter Expert (SME)–level expertise in AlgoSec Security Management solutions. The ideal candidate will have expert-level hands-on experience with AlgoSec firewall automation and integration with multiple firewall platforms including Palo Alto, Check Point, Cisco FTD, and FortiGate. This role also requires strong hands-on expertise with enterprise firewalls and will be responsible for firewall rule migrations, automation, and Day 2 operations support in the Network Security domain.

Key Responsibilities

- Serve as SME for AlgoSec, including design, implementation, customization, and ongoing optimization.
- Perform end-to-end firewall rule automation and policy management using AlgoSec.
- Integrate AlgoSec with multiple firewall platforms such as Palo Alto, Check Point, Cisco FTD, and FortiGate.
- Lead and execute firewall rule migrations between different firewall vendors.
- Provide Day 2 operational support for network security infrastructure with a primary focus on firewalls.
- Troubleshoot complex firewall and policy-related issues across heterogeneous environments.
- Collaborate with network, cloud, and application teams to support secure connectivity requirements.
- Ensure compliance with security policies, audit requirements, and industry best practices.
- Create and maintain technical documentation, SOPs, and operational runbooks.

Required Technical Skills

- Expert-level hands-on experience with AlgoSec Firewall Analyzer, Fire Flow, and AppViz (or equivalent modules).
- Strong hands-on expertise with Palo Alto and/or Check Point firewalls (SMElevel preferred).
- Experience working with Cisco FTD and FortiGate firewalls.
- Proven experience in firewall policy design, optimization, and cleanup.
- Strong understanding of network security concepts including ACLs, NAT, VPNs, and routing.
- Experience with firewall rule migration projects across multiple vendors.
- Familiarity with automation, APIs, and integration with ITSM tools is a plus.

Preferred Qualifications

- Industry certifications such as PCNSE,PCCSE, CCNP Security, Fortinet NSE, or AlgoSec certification.
- Experience supporting large enterprise or service provider environments.
- Exposure to cloud security platforms and hybrid network environments.
- Strong analytical, troubleshooting, and problem-solving skills.

Soft Skills

- Strong communication and stakeholder management skills.
- Ability to work independently and lead technical initiatives.
- Detail-oriented with a strong focus on operational excellence and security compliance.

We are looking for a motivated and skilled Security Consultant to join our client's expanding cybersecurity team in Singapore. You will play a key role in assessing and exploiting security vulnerabilities across networks and web applications, helping clients strengthen their security posture through actionable remediation.

Working closely with internal teams and clients, you will conduct thorough vulnerability assessments and penetration tests while staying abreast of emerging threats and offensive security best practices. Your expertise will contribute to both client solutions and internal research initiatives.

Job Requirements:

To excel in this role, candidates should meet the following qualifications:

• Minimally 1 year of hands-on experience in vulnerability assessment, penetration testing, or offensive security.
• Relevant certification, such as OSCP or OSCP+
• Strong knowledge of network protocols, web application architecture, and common vulnerabilities including OWASP Top 10.
• Proficiency with industry-standard tools like Burp Suite, Metasploit, Nmap, and Nessus.
• Excellent analytical, problem-solving, communication, and report-writing skills.

Location: Outram Road (Tan Boon Liat Building) – Client sites islandwide

Salary & Benefits

• Basic Salary: Up to $7,000
• Transport Allowance: Car: $750/month, Motorcycle: $400/month
• Mobile Phone reimbursement
• AWS & Performance Bonus
• 18 Days Annual Leave
• Birthday Leave
• Comprehensive Medical Insurance

Working Hours

• Monday to Friday, 8:30 AM – 6:00 PM
• Night and weekend work may be required depending on operational needs

Job Summary

The Lead Technical Manager will be responsible for managing a group of Technical Officer for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Job Responsibilities:

• Oversee the end-to-end service and maintenance operations for security systems.
• Serve as the primary point of contact for clients on service and maintenance matters.
• Lead and supervise a team of Technical Officers and service personnel.
• Plan and manage service schedules, resource allocation, milestones, and project deliverables.
• Ensure timely completion of maintenance commitments and service requests.
• Manage client relationships, address concerns, and enhance customer satisfaction.
• Coordinate day-to-day operations and support the team in resolving technical and operational issues.
• Maintain and improve documentation of infrastructure, systems, and operational processes.
• Identify opportunities for process improvements, training, and service enhancement.
• Build and maintain strong technical relationships with existing and prospective customers.
• Set team targets, provide guidance, and support staff development and performance management.
• Communicate effectively with stakeholders to evaluate technical solutions and project requirements.
• Handle customer feedback and complaints professionally.
• Perform other duties as assigned by management.

Job Requirements:

• Minimum 6 years related experience with demonstrable record of success
• Good communicator with excellent coordination skills
• Ability to work with multiple discipline projects
• Committed individual with great initiative and strong problem-solving skills
• Diploma or Degree in Electrical / Mechanical Engineering/Computer Science or its equivalents
• Experience in the Security and CCTV industry and exposure to products and operations will be an added advantage

Please submit your updated resume in MS Words format by using the APPLY NOW BUTTON.

**We regret to inform that only shortlisted candidates would be notified.

By submitting your personal data and/or resume, you give consent to collection, use and disclosure of your personal data and/or resume by the company (or its agent) for the purpose of the processing and administration by company relating to this job application.

https://www.mci.com.sg/wp-content/uploads/2025/09/MCI-Job-Applicant-Data-Protection-Notice.pdf

Kenneth Isaac Peter
Registration Number: R25127720
MCI Consulting Pte Ltd (EA Licence: 13C6730)

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines