Total 185 infrastructure engineer job vacancies in Legal / Public / Security category

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117

Employment Type: Contract (1 year renewable, with potential for conversion)

Working Hours: Monday toThursday (8.30am – 6.00pm), Friday (8.30am – 5.30pm) (Hybrid WorkingArrangement)

Location: One North

Salary: Up to SGD 5,300

We are looking for an experienced IT Systems Governance & Project Management professional who can oversee enterprise systems from both an operational and governance perspective. The ideal candidate should have strong experience in IT governance, risk management, audit compliance, and system lifecycle management, while also being capable of coordinating system enhancements, security assessments, and change initiatives across multiple stakeholders.

Responsibilities:

• Conduct system criticality and risk assessments for enterprise systems.
• Manage system governance, compliance, and audit readiness activities.
• Coordinate system changes, enhancements, and remediation efforts.
• Track and manage security risks, vulnerabilities, and remediation actions.
• Support disaster recovery and cyber incident recovery planning.
• Perform access reviews and ensure timely user deprovisioning.
• Manage certificates, API keys, and system integration credentials.
• Maintain accurate system documentation and governance records.
• Collaborate with system owners, vendors, and internal stakeholders to drive system improvements.
• Provide regular reporting on system risks, issues, changes, and compliance status.

Requirements:

• Degree/Diploma in IT, Computer Science, Information Systems, or related field.
• At least 5 years of experience in IT governance, systems support, project management, or security-related roles.
• Strong understanding of IT governance, risk management, compliance, and audit processes.
• Experience managing system changes, vendors, and stakeholder engagements.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Endpoint Security Engineer – Singapore (SingaporeansOnly)

We are hiring an experienced and hands-on Endpoint SecurityEngineer to manage, operate, and enhance enterprise endpoint protectioncapabilities across our organization. The ideal candidate will have strongexperience in endpoint security operations, incident management, and enterprisesecurity tools such as Symantec Endpoint Protection Manager (SEPM) and/orMicrosoft Defender.

This role requires close collaboration with IToperations, security teams, and end users to ensure enterprise endpoints remainsecure against evolving cyber threats.

Key Responsibilities

Endpoint Protection & Security Operations

• Administer, maintain, and support Symantec Endpoint Protection Manager (SEPM), Microsoft Defender, or equivalent endpoint security platforms
• Deploy, configure, and manage endpoint protection policies including:
• Anti-malware
• Intrusion Prevention Systems (IPS)
• Firewall policies
• Device control
• Monitor endpoint security alerts and investigate incidents
• Perform root cause analysis and remediation activities
• Generate regular security posture and compliance reports
• Manage the complete lifecycle of endpoint security agents
• Execute upgrades, patching, and rollout activities during maintenance windows

User Support & Incident Management

• Provide Level 2 / Level 3 support for endpoint security-related incidents and requests
• Troubleshoot endpoint protection issues across Windows and/or Linux environments
• Work closely with internal IT and security teams to resolve operational issues efficiently

IT Service Management

• Follow ITIL processes for Incident, Problem, and Change Management
• Maintain accurate ticket documentation and resolution records
• Ensure SLA compliance and timely issue resolution

Required Skills & Qualifications

• Singaporeans only
• Degree in Computer Science, Information Technology, Cyber Security, or related discipline
• 4–6 years of relevant experience in endpoint security operations
• Minimum 1 year of hands-on experience with SEPM and/or Microsoft Defender
• Experience with HIPS/HIDS technologies
• Strong knowledge of Windows and/or Linux (RedHat) administration
• Ability to manage multiple priorities in a fast-paced environment
• Strong communication and interpersonal skills

Preferred Skills

• Knowledge of Microsoft Defender ecosystem
• Experience with scripting and automation using:
• Powershell
• Python

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

• MNC Company
• Basic $2500 - $2800 + Incentive + AWS + Variable Bonus
• Excellent Welfare and Benefits + Career progression
• Working location: West
• Working hours: 12 Hours Rotating Shift: 7.30am-7.30pm, 7.30pm-7.30am (16 Shifts a month)

Job Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems
• Attending to customer request on alarm and card access systems
• Conducting patrols at night
• Any others ad hoc duties as assigned

Job Requirements:

• Possess minimum Higher Nitec in Electrical Engineering, Electronic & Computer Engineering, Mechanical Engineering, and other related fields
• Possess at least 1- 2 years of relevant experience
• Possess Class 3 Driving License will be an advantage

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

LIONG ZHAO GUAN (R22107632)

EA Recruitment Pte Ltd

EA License No: 21C0492

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :

8:30am to 6pm (Monday to Friday) onsite, no hybrid option.

Feeling stuck in your career? It’s time for a change.

SICD’s 12-month Place-and-Train program equips you with the skills and confidence to launch a successful career as a Cyber Security Engineer.

Benefit from personalized 1:1 mentorship, a guaranteed SGD 3,000 monthly salary, and industry-recognized certifications — all designed to position you for long-term success.

Visit sicd.sg for more information, and join our upcoming webinar to learn more and ask questions about our career development program.

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

ABOUT US

As Southeast Asia’s #1 integrated logistics provider, Teleport is all about making logistics fast, affordable and reliable. 

Our mission? To move things across Southeast Asia better than anyone else. We’re focused on making next-day delivery a reality for all.

#TeamTeleport is guided by our values: Move with urgency — because time is crucial; Aim to pioneer — constantly innovating to stay ahead; Do it with intent — delivering with purpose and precision; and Keep it real — maintaining authenticity and transparency in all we do.

Learn more about Teleport here: https://www.teleport.it/ 

A DAY IN A LIFE

At Teleport, we’re building toward IPO — and that means doing the boring things well. Execution, discipline, and follow-through matter as much as big ideas.

Your day will be varied, often crossing functions, but most of your time will focus on delivering results, owning your scope end-to-end, making fast, data-informed decisions, and following through on fundamentals like reporting, documentation, and processes.

How we work matters as much as what we achieve. Doing the basics right, every time, sets us up for success.

Most of your time will be spent driving impact through:

• Securing Our Foundations: Supporting Senior Security Architects to design resilient architectures across our applications and cloud environments (AWS, Azure, or GCP), while conducting threat modeling and vulnerability assessments to identify and mitigate risks before they disrupt us.
• Integrating Security & Compliance: Partnering cross-functionally with IT, DevOps, and Engineering to bake security into our SDLC and operations via DevSecOps practices, while meticulously developing and maintaining security standards that keep us compliant with ISO 27001, NIST, and GDPR.
• Defense & Automation: Keeping a pulse on emerging threats to proactively strengthen our posture, evaluating new security tools, leveraging basic scripting (Python, Bash) for automation, and providing reliable support to investigate, contain, and document security incidents.

These are minimum-requirement skills and a ‘must-have’ for the role:

• Educational Foundation & Passion: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, paired with a strong desire to learn and a genuine passion for cybersecurity. Relevant industry certifications (e.g., CompTIA Security+, (ISC)² SSCP, GIAC GSEC) are a plus.
• Hands-on Experience & Tooling: 1–3 years of experience in a cybersecurity or IT role, with practical familiarity using common security technologies such as firewalls, IDS/IPS, and SIEM solutions.
• Cloud & DevSecOps Knowledge: Direct experience with cloud platforms (AWS, Azure, or GCP) and their native security services, alongside a strong familiarity with DevSecOps practices, tools, and basic scripting skills (e.g., Python, Bash) for security automation.
• Core Technical Knowledge: A fundamental understanding of networking concepts (TCP/IP, DNS, routing) alongside core security principles like the CIA triad and the principle of least privilege.
• Analytical & Communication Skills: Strong analytical and problem-solving skills, combined with excellent written and verbal communication to effectively articulate complex technical concepts to both technical and non-technical audiences.

At Teleport, we’re all about creating a diverse and inclusive team where everyone feels valued. We believe that different perspectives make us stronger and help us do logistics better across Southeast Asia. We welcome people from all walks of life and celebrate what makes each of us unique. If you’re passionate about making a difference, we’d love to hear from you!

Work-Life at #TeamTeleport

Unlimited training -You will have access to a wide range of learning resources including Notion!

Ditch the Suit & Tie - Be comfortable as you are, express your inner Fashionista… as long as it's not a birthday suit!

Vacation and time away - Sometimes you need to recharge and come back energized! That’s why you will get 90% off flights to destinations within AirAsia's network, 10%-15% discounts on selected eateries at KLIA2.

Growth opportunities - We embrace and take on opportunities to learn and grow at Teleport as we reimagine the way we do things. Yes, we meet the challenge head on as a team, and we celebrate together with you when you succeed and reap the rewards when the hard work pays off!

We are hiring and the details of this position are:

Job title: Cyber Security Engineer (Perm role, CREST CRT certificate, VAPT experience, up to $9000)

Job Description:

Technical Delivery & Penetration Testing

• Perform penetration testing (VAPT) across web, mobile, cloud, and infrastructure environments, ensuring CREST standards are met.
• Generate detailed technical and executive-level reports with risk analysis and actionable remediation guidance.
• Collaborate with pen-testers and technical teams to deliver client engagements and integrate findings into tailored solutions.
• Apply knowledge of OWASP Top 10, MITRE ATT&CK, and secure coding practices to assess and improve client environments.

Automation Integration

• Integrate AI and RPA into cybersecurity operations to enable automated triage, evidence collection, and compliance reporting.
• Lead initiatives to embed hyper automation into cybersecurity workflows, combining PA, AI/ML, and orchestration tools.

Thought Leadership & Brand Building

• Provide thought leadership on emerging cybersecurity risks, automation trends, and regulatory developments.
• Represent the company at industry events, conferences, and networking sessions to build brand visibility and strategic relationships.

Requirement:

• CREST CRT and CPSA certificate preferred
• Penetration testing, vulnerability assessments, security audits
• Exposure to RPA tools (UiPath, Automation Anywhere, Power Automate); familiarity with AI-based security tools (XDR, SOAR, ML-based detection)
• Strong understanding of OWASP Top 10, MITRE ATT&CK, PDPA, MAS TRM, ISO 27001
• Exceptional communication, presentation, and negotiation skills; ability to work independently and collaboratively in a fast-paced, client-facing consulting environment

Interested applicants please send your resume to rita@recruitexpress.com.sg and look for:

Rita Shi Tianhe

Recruit Express Pte Ltd

EA License No: 99C4599

EA Personnel Number: R26162019

We regret that only shortlisted candidates will be contacted.

YOUR NEW JOB

As a Security Implementation Engineer, you will work alongside senior consultants and project teams to deliver successful implementations of Google SecOps and/or SentinelOne platforms, ensuring customers are onboarded effectively and solutions are configured according to project requirements.
You will support the deployment, configuration, and implementation of modern cybersecurity solutions across enterprise customer environments.
This is a 12-month renewable contract role based with one of the region's leading technology & systems integrators.

WHAT YOU’LL BE DOING

• Support the implementation and deployment of Google SecOps and/or SentinelOne solutions for enterprise customers
• Assist with solution configuration, onboarding, and integration activities
• Participate in customer workshops, requirement gathering, and technical discussions
• Perform testing, validation, and troubleshooting during implementation projects
• Document implementation procedures, technical configurations, and deployment activities
• Work closely with project managers, senior engineers, and customer stakeholders to ensure successful project delivery
• Provide post-implementation support and issue resolution where required
• Stay updated on product features, cybersecurity trends, and vendor best practices

WHAT IS NEEDED FROM YOU

• At least 1 year of hands-on experience with Google SecOps and/or SentinelOne solutions
• 1–3 years of IT infrastructure, cybersecurity, or systems implementation experience
• Basic understanding of SIEM, endpoint security, threat detection, and security operations concepts
• Experience supporting technical deployments, implementations, or system integrations
• Familiarity with Windows, Linux, networking, and cloud environments
• Strong troubleshooting and problem-solving skills
• Diploma or degree in Information Technology, Computer Science, Cybersecurity, or related field
• Good communication skills and ability to work directly with customers and internal teams

WHAT WILL MAKE YOU STAND OUT

• Relevant certifications from Google, SentinelOne, Microsoft, or other cybersecurity vendors
• Exposure to cybersecurity projects within enterprise environments
• Experience working for a systems integrator, managed services provider, or IT services organisation
• Familiarity with scripting or automation tools such as Python, PowerShell, or APIs
• Experience supporting SOC, SIEM, EDR, or threat monitoring environments

• Permanent role with MNC with high job stability
• Exposure to wide range of latest technology 

About the company

Our client is an established MNC with over 30 years of experience who is a market leader within their industry. As part of their plan to invest in technology, they are now hiring an experienced IT Infrastructure Security Engineer to join their team.

About the job

• Handling IT Infrastructure Operations in a cloud based environment
• Handling IT security such as designing and deploy Zero trust /  Conditional Access (CA) policies that evaluate signals (User, Device, Location, Application, and Real-time risk)
• Design, maintain, and rigorously test robust disaster recovery and business continuity plans to ensure system uptime and data integrity.
• Manage external vendors, ensuring SLA is adhered

Skills and experience required

As a successful applicant, you will have at least 7 years of experience in security and IT infrastructure. Exposure to Azure AD / Entra ID security or O365 Conditional Access will be highly preferred. 

Whats on offer

This is an excellent opportunity to join an established company with heavy investments in Security. 

To apply online please use the 'apply' function, alternatively you can reach me at https://www.linkedin.com/in/hoonteck-nologyrecruitment. (EA: 94C3609/ R1219669)

Cloud Security Engineer

Responsibilities:

• Conduct vulnerability tests on Client's Cloud infrastructure and services for potential threats, misconfigurations and weaknesses.
• Strong in Vulnerability management tools like Tenable.
• Implement best practices in Cloud security, Develop and maintain automated scripts for vulnerability scanning and reporting.
• Stay current with the latest security trends, tools, and AWS features to enhance our security posture.
• Address all findings promptly and effectively and document findings for reporting to management.

Requirements:

• Strong in Tenable AWS services such as EC2, S3, RDS, and Lambda.
• Proficient with security vulnerability tools and platforms
• Deep understanding of security principles, practices, and risk management.
• Certifications in AWS or RHEL are advantageous.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : kelvin@starcareerconsulting.com

Kelvin Lee (Reg. No. R1872625)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Description

Who we are

Employment Hero is on a mission to make employment easier and more valuable for everyone. Our Employment Operating System brings hiring, HR, payroll and benefits into an all-in-one solution. 

Since our inception in 2014, we’ve scaled to a $2 billion valuation and gained a presence in 6 countries globally – Australia, New Zealand, Singapore, Malaysia, the UK and Canada. We now service over 300,000 businesses and more than 2 million employees. 

The EH Way

At Employment Hero, we’re proud of our unique DNA, which we call The EH Way.  

1. We are Mission First – everything we do (from what we work on, to how we allocate capital and where we focus) is driven by our Mission
2. We are Remote First – we champion a remote environment with a preference for asynchronous communication and a high degree of autonomy 
3. We are AI First – we are committed to using AI to accelerate our mission; AI is not just a tool, it’s a fundamental part of how we operate, innovate, and scale
4. We are Apolitical – we do not take a position on political or social topics, unless it relates to our Mission
5. We Live by Our Values – we role model our values 100% of the time
6. We Expect High Performance – we set a high standard and we’re not satisfied with being average

This role 

The Cloud Security Engineer is responsible for securing our AWS environment, with a strong focus on automation, AI-assisted workflows, and scalable security controls.

This role is not just about fixing issues, but about building intelligent systems that continuously detect, prioritise, and remediate cloud risks with minimal manual effort.

As a Cloud Security Engineer, you will be responsible for:

Cloud Security Engineering

• Remediate cloud risks across IAM, network exposure, encryption, and workloads
• Design and implement secure-by-default patterns across AWS (IAM guardrails, network segmentation, least privilege)
• Partner with SRE and Engineering to embed security into infrastructure and deployments

AI-Driven Detection & Response

• Leverage AI tools to triage, prioritise, and investigate cloud security findings
• Build workflows that correlate signals from cloud logs, EDR, and third-party tools into actionable insights
• Continuously improve detection coverage using AI-assisted analysis

DevSecOps & Automation

• Build automated security checks into CI/CD (IaC scanning, dependency risk, secrets detection)
• Use AI to accelerate vulnerability triage and remediation workflows
• Reduce manual security effort through scripting, automation, and intelligent tooling

Security Data & Intelligence

• Integrate and analyse data from sources such as SBOMs, vulnerability feeds, and threat intelligence
• Use AI to identify patterns, emerging risks, and prioritisation signals across large datasets
• Contribute to internal “security data platform” initiatives

Who You Are 

Required

• Strong experience securing AWS environments
• Solid understanding of IAM, networking, logging, and cloud-native architectures
• Experience with infrastructure-as-code (e.g. Terraform) and CI/CD pipelines
• Ability to script and automate (Python, Bash, or similar)
• Familiarity with SBOM, supply chain security, and dependency risk management
• Experience using or integrating AI tools in engineering or security workflows

Preferred

• Experience with tools like AWS Security Hub, GuardDuty, Wiz, or Datadog
• Experience building internal tools or automation platforms

What we can offer

At Employment Hero, we don’t just talk about a better way to work – we live it. Joining Employment Hero means

• You will work remotely, with the flexibility to own your time and impact
• You will access cutting-edge tools to amplify your work, knowledge and outputs 
• You’ll surround yourself with ambitious, outcome-driven colleagues who challenge you to do the best work of your life
• You’ll own ESOP (employee share options) in one of the world’s fastest-growing tech companies 
• You’ll also have access to a wide range of benefits that includes – a very generous parental leave policy, subsidised egg freezing (so you can make the choice that’s right for you, on your terms), a WFH office expense budget, and outstanding learning & development opportunities 

We’re AI-first, so you may meet some of our AI tools early in the process. They help us cut the noise, surface great talent fast and make sure every candidate gets a fair, consistent experience.

We verify candidate identity and location as part of our hiring process.

At Employment Hero, we are committed to safeguarding the privacy of your application data. To understand how we do so, you can read our Applicant Privacy Policy here employmenthero.com/legals/applicant-policy/

Employment Hero celebrates diverse perspectives and experiences, we invite people of all backgrounds and identities to apply for this position.

Responsibilities:

·      Monitor security alerts and perform initial analysis

·      Investigate security events using SIEM and related tools

·      Perform log analysis to identify suspicious activities

·      Support incident investigation and response

·      Help improve detection rules and monitoring coverage

·      Work with teams in different regions on security operations tasks

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in information security, Computer Science, or related field

·      1–3years of experience in security operations, SOC, or related work

·      Familiar with basic SOC processes (alert handling, incident response)

·      Experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk)

·      Basic log analysis capability (Windows, Linux, network logs)

·      Able to work with teams across regions

·      Experience working with overseas or cross-regional teams is a plus