Total 832 information security analyst job vacancies

Job Duties:

• Analyze internal and external data to identify trends, assess performance, and support business strategy;
• Translate data insights into clear, actionable recommendations that support execution across product, marketing, and operations;
• Build and maintain dashboards, business reports, and performance metrics to monitor KPIs and key initiatives;
• Design, develop and maintain reporting frameworks, defining reporting cadences and delivering executive-level reports to senior leadership;
• Collaborate with cross-functional teams to define data requirements and support business planning;
• Ensure data integrity and accuracy across all reporting outputs by developing validation processes and partnering with data source/system owners;
• Develop data-driven reports and presentations to communicate key findings and strategic recommendations to senior management and non-technical stakeholders;
• • Provide ad hoc insights and data support for strategic and operational projects;
  

Required Skills and Qualifications

• 7-8 years of professional experience as a Business Analyst or a similar role.
• Demonstrated exposure to or strong interest in corporate real estate, facilities management, or construction.
• Minimum Bachelor’s degree in Business, Project Management, Data Science, Statistics, or a related field.
• Expert proficiency with Business Intelligence (BI) platforms (e.g., Tableau, Cognos) for creating insightful dashboards and automated reports.
• Understanding of construction project lifecycles, facilities maintenance processes, corporate real estate and relevant industry best practices is a significant plus.
  

Interested applicants please send your resume in MS Words format to Joanna.Tan@ambition.com.sg and attn it to Tan Joanna (R1104661).
Short listed candidates will be notified
www.ambition.com.sg
EA Registration Number: R1104661
Data provided is for recruitment purposes only

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities:

• Manage critical production incidents in collaboration with Users and Ops teams, ensuring minimal impact to business operations, especially payment processing. Provide immediate workarounds to avoid delays and ensure service continuity.
• Collaborate with multiple application, interface, and infrastructure teams (onshore/offshore) to triage, track, and resolve production issues across complex environments.
• Debug and analyze application/system failures, perform RCA using structured techniques, and work with development teams to implement permanent fixes while providing interim solutions.
• Track and manage production incidents via tools such as DCon and JIRA, ensuring timely updates, proper escalation, and closure within defined SLAs.
• Actively participate in release cycles, including deployment activities, post-release verification, and health checks to ensure zero disruption to services.
• Lead and support End-of-Life (EOL) upgrades, ensuring successful UAT validation and smooth production deployment of application and infrastructure upgrades.
• Any other ad-hoc duties as assigned by supervisors

Contribute to infra-level activities such as:

• JBoss / WebSphere patching and upgrades
• Oracle DB patching and upgrades
• OS upgrades and maintenance
• Platform migrations (e.g., VPC → VIC, VPC → OCP)
• Drive initiatives to reduce operational toil through automation, performance tuning, and process optimization to improve system reliability and efficiency.
• Continuously monitor system health (availability, latency, throughput, batch processing) and act on alerts promptly; design and implement new alerting mechanisms where necessary.
• Ensure smooth execution of BOD/EOD batch jobs, proactively resolving job failures and preventing transaction loss. Perform reconciliation checks post-processing to ensure payment integrity.
• Work closely with Ops teams to recover impacted payments due to system or infrastructure failures, ensuring minimal financial and operational impact.
• Manage and execute DR drills(quarterly/annually) in coordination with dependent systems to validate business continuity readiness.
• Support business users with data extraction requests for audit and regulatory purposes, ensuring accuracy and compliance.
• Provide regular updates on production health, incident status, and risk to stakeholders, including management and business users; escalate issues proactively when required.
• Conduct periodic reviews of open issues with stakeholders, ensuring timely closure within SLA commitments.
• Maintain detailed documentation of production incidents, solutions, and known errors; build and contribute to knowledge base repositories.
• Deliver KT sessions for new applications, processes, and team members to ensure smooth onboarding and capability building.
• Liaise with external infrastructure providers (e.g., IBM teams) to resolve issues related to WebSphere, Oracle, and UNIX servers.
• Manage multiple priorities effectively, coordinate deliverables, and adapt quickly to changing business needs while meeting timelines
• Any other ad-hoc duties as assigned by supervisors

Requirement:

• Around 8+ years of experience and above
• Bachelor’s degree in engineering / computer science / information technology or related field.

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

The Applications Development Senior Programmer Analyst is an intermediate level position responsible for participation in the establishment and implementation of new or revised application systems and programs in coordination with the Technology team. The overall objective of this role is to contribute to applications systems analysis and programming activities.

Responsibilities:

• Conduct tasks related to feasibility studies, time and cost estimates, IT planning, risk technology, applications development, model development, and establish and implement new or revised applications systems and programs to meet specific business needs or user areas

• Monitor and control all phases of development process and analysis, design, construction, testing, and implementation as well as provide user and operational support on applications to business users

• Utilize in-depth specialty knowledge of applications development to analyze complex problems/issues, provide evaluation of business process, system process, and industry standards, and make evaluative judgement

• Recommend and develop security measures in post implementation analysis of business usage to ensure successful system design and functionality

• Consult with users/clients and other technology groups on issues, recommend advanced programming solutions, and install and assist customer exposure systems

• Ensure essential procedures are followed and help define operating standards and processes

• Serve as advisor or coach to new or lower level analysts

• Has the ability to operate with a limited level of direct supervision.

• Can exercise independence of judgement and autonomy.

• Acts as SME to senior stakeholders and /or other team members.

• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Recommended Qualifications:

• 5-8 years of relevant experience

• Experience in systems analysis and programming of software applications

• Experience in managing and implementing successful projects

• Working knowledge of consulting/project management techniques/methods

• Ability to work under pressure and manage deadlines or unexpected changes in expectations or requirements

Education:

• Bachelor’s degree/University degree or equivalent experience

Note: Successful candidates need to be comfortable with working on weekends and shifts as and when required

Responsibilities:

• Provide support and maintenance for insurance-related applications on the AS400 platform.
• AS400 Application Support
• Able to provide maintenance support
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Strong analytical and problem-solving skills
• Hands-on experience with AS400/IBM i
• Knowledge of Smart400
• Experience with PolisyAsia/Polisy400
• BusinessObjects (BO) development experience

Good to Have:

• Experience in Web Services/REST API development
• Exposure to Smart Upgrade
• Understanding of General Insurance business processes
• Willingness to work onsite and coordinate with business stakeholders
• Relevant experience in AS400 application support and insurance domain preferred.

Interested applicants, please email your resume to Karin Chan Wei Kien

Email: karinchan@recruitexpress.com.sg

CEI Reg No: R1104584

Recruit Express Pte Ltd

UEN: 199601303W

EA Licence No: 99C4599

• IT Business Analyst
• Business Requirements Gathering & Process Analysis
• Stakeholder Management & Solution Delivery
• User Stories, UAT & Digital Application Projects
• Government project

Job Scope:

• Gather, analyse, and document business requirements from stakeholders

• Facilitate workshops, meetings, and discussions to understand business needs and objectives

• Analyse current business processes and identify opportunities for improvement and optimisation

• Prepare business requirement documents (BRD), user stories, process flows, use cases, and functional specifications

• Work closely with developers, testers, project managers, and business users throughout project implementation

• Support solution design, system testing, User Acceptance Testing (UAT), and implementation activities

• Track issues, risks, dependencies, and change requests to ensure smooth project delivery

• Generate reports, dashboards, and analysis to support business decisions

• Ensure project deliverables align with business objectives, timelines, and compliance requirements

• Any other ad-hoc duties as assigned

Requirements:

• Degree/Diploma in Business, Information Technology, Computer Science, or related discipline

• Minimum 3 years of experience as a Business Analyst or in a similar role

• Experience in requirements gathering, process mapping, and documenting user stories/use cases for transactional or customer-facing systems

• Strong communication and stakeholder management skills with the ability to collaborate across business and technical teams

• Strong analytical, problem-solving, and documentation skills

• Ability to work independently and manage multiple priorities effectively

• Exposure to Agile methodologies (Scrum/Kanban) and tools such as Jira, Confluence, and ServiceNow is preferred

• Familiarity with mobile application projects, UX/UI collaboration, and customer journey design for digital platforms is advantageous

Other Information:

• Location: CBD

• Working Hours: 5 Days, Office Hour

To apply please click on the APPLY NOW button or email your resume to search70@searchindex.com.sg for faster processing:

We regret only shortlisted candidates will be notified. By submitting any application or résumé to us, you will be deemed to have agreed and consented to us collecting, using, retaining and disclosing your personal information to prospective employers for their consideration.

Yoong Poh Feng
EA License | 14C7092
EA Registration Number | R1105076

Responsibilities:

KYC and Due Diligence

• Conduct thorough KYC due diligence on new individual and corporate clients.
• Review and validate client documents (passports, proof of address, corporate documents, trust deeds, source of wealth statements, etc.).
• Perform background screening using internal tools and third-party databases.
• Identify and escalate any potential red flags (e.g., PEPs, sanctions exposure, adverse media hits).

Client Onboarding Support

• Act as the key point of contact for Relationship Managers during the onboarding process.
• Guide front office teams on KYC requirements and ensure complete and accurate submissions.
• Ensure timely onboarding of clients while maintaining compliance with internal SLAs.

Data Entry and System Management

• Accurately input and maintain client data in internal systems (e.g., Avaloq, CRM tools).
• Update client KYC profiles and risk ratings during the onboarding process

Risk and Compliance Control

• Ensure that all onboarding activities comply with AML laws, FATCA/CRS requirements, sanctions rules, and internal policies.
• Support periodic quality assurance reviews and internal/external audits related to onboarding and KYC files.
• Maintain strong records and audit trails for all KYC and onboarding actions.

Process Improvement

• Propose improvements to the onboarding workflow to enhance efficiency and client experience.
• Participate in projects related to onboarding process upgrades or regulatory changes.

Requirement:

• Bachelor’s degree in business, Finance or related field.
• 2–5 years of KYC/AML experience, preferably within private banking or wealth management.
• Experience with onboarding high-net-worth (HNW) and ultra-high-net-worth (UHNW) clients is a plus.
• Fluent and comfortable conversing in English (Mandarin & Cantonese is a plus) to communication with external clients.
• Good stakeholder management skills.
• Strong time management, organizational, planning and follow-up skills.
• Ability to work independently and manage high volumes under tight deadlines.
• Strong interpersonal and communication skills to work with front office and compliance teams.
• Proficiency with Microsoft Office and familiarity with banking platforms and screening tools.

Note: Successful candidates need to be comfortable with working on weekends and shifts as and when required

Responsibilities:

• Provide support and maintenance for insurance-related applications on the AS400 platform.
• AS400 Application Support
• Able to provide maintenance support
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Strong analytical and problem-solving skills
• Hands-on experience with AS400/IBM i
• Knowledge of Smart400
• Experience with PolisyAsia/Polisy400
• BusinessObjects (BO) development experience

Good to Have:

• Experience in Web Services/REST API development
• Exposure to Smart Upgrade
• Understanding of General Insurance business processes
• Willingness to work onsite and coordinate with business stakeholders
• Relevant experience in AS400 application support and insurance domain preferred.

Interested applicants, please email your resume to Karin Chan Wei Kien

Email: karinchan@recruitexpress.com.sg

CEI Reg No: R1104584

Recruit Express Pte Ltd

UEN: 199601303W

EA Licence No: 99C4599

The Reference Data Specialist is responsible for instructions of client deliverables, coding and data input validation focusing on specific industry/category or set of categories (e.g. Beverages, Food, Health and Beauty Products). As a Reference Data Specialist  at NielsenIQ, you create and deliver client outputs in a correct and timely manner.

• Responsible for instructions of client deliverables, coding and data input validation focusing on specific industry/category or set of categories.
• Does cross coding and item-related quality checks on a daily basis
• May act as a back-up to other coders when needed; Keep track/document special instructions related to category assignment
• Plan and execute a complex daily personal workload and support to meet departmental and company schedules
• Ensure accuracy throughout the process, from validation before database setup to managing samples, and identify areas for improvement
• Answer external questions and act as a liaison with everyone from clients to stakeholders; To be able to identify, investigate and coordinate the resolution of data, process, or product related queries
• Willing to be trained to be a category expert

About the Role

We are looking for a proactive, self-motivated, and resourceful Digital Business Analyst to join our dynamic team. In this role, you will act as a critical bridge between technology and business, supporting the Chief Information Officer (CIO) and collaborating with cross-functional teams.

Key Responsibilities

• Requirement Elicitation & Prototyping: Map citizen/business service journeys, gather requirements, and build rapid prototypes to validate business cases and measure value.

• Product Ownership Assistance: Translate business needs into clear user stories, technical specifications, and acceptance criteria. Help define the product vision, roadmap, and strategic objectives.

• Tech Evaluation & AI Innovation: Actively experiment with and evaluate emerging technologies (including AI tools) to ensure alignment with GovTech’s technology directions and Whole-of-Government (WOG) central solutions.

• Agile & Project Delivery: Identify and implement appropriate project methodologies (Agile, Waterfall) tailored to project environments. Ensure smooth system deployment readiness and perform post-change impact analysis.

• Strategic Advisory: Support the CIO in identifying high-impact digital transformation opportunities and use data-driven insights to guide product strategies.

Job Requirements

Minimum Qualifications

• Education: Bachelor’s Degree in a relevant IT or Technology discipline.

• Experience: Minimum of 4+ years of hands-on experience in IT business analysis, solution design, and testing.

• Product Lifecycle: Proven track record of participating in at least one full software/product development lifecycle (Agile environment highly preferred).

• Technical Agility: Ability to code and iterate prototypes live during planning sessions and lead collaborative workshops.

• Soft Skills: Outstanding analytical, problem-solving, stakeholder management, and influencing skills; comfortable engaging with users across all levels.

Preferred Skills & Certifications

• Professional Business Analysis certification (e.g., CBAP).

• Certified Scrum Master or Product Owner is a strong advantage.

• Prior experience in IT consulting, software development, Service Design, or Knowledge Management.

Good-to-Have (Bonus Points)

• Tech Stack Familiarity: Basic exposure to modern web technologies (React, JavaScript, Python, Java, or .NET/C#).

• GovTech Ecosystem: Familiarity with government development tools, CI/CD concepts, and workflows (such as SHIP/HATS, GitHub, or GitLab).

• Collaboration Tools: Experience working with Agile and design tools like JIRA, Figma, or Miro.

• Modern Platforms: Exposure to Rapid Application Development (RAD) platforms like OutSystems, or Content Management Systems (e.g., Sitefinity, SharePoint Online).

• Data analytics capabilities and familiarity with product metrics.

Executive

The Executive will support CSPO's day-to-day administrative and operational functions, working with the Executive Director, Head of Accreditation and Standards, and Head of Operations &Outreach to ensure the smooth running of CSPO's activities and operations.

Roles and Responsibilities

• Provide administrative and secretariat support to the CSPO, including the scheduling and coordination of meetings, preparation of agendas, and recording of minutes.
• Provide logistical and administrative support for meetings and activities.
• Manage correspondences, filing, and documentation in an organised and systematic manner
• Assist in the preparation of reports, presentations, and other documents as required by the Executive Director and Heads.
• Support the Executive Director and Heads in any other administrative duties.

Qualifications and Requirements
*Only Singaporean/PR should apply

Education

• Relevant qualification(s) in business administration, management, or a related field

Experience

• Minimum 3 years of relevant working experience in office administration or secretariat support.
• Experience supporting a small team or office environment would be an advantage.
• Prior experience in a government-related or professional body setting would be an advantage.

Skills and Competencies

• Proficient in Microsoft Office applications.
• Good written and verbal communication skills
• Well-organised, meticulous, and detail-oriented
• Able to manage multiple tasks and priorities effectively

Personal Attributes

• Collaborative and able to work effectively in a small team environment.
• Self-motivated and able to work independently with minimal supervision.
• Results oriented and able to work under pressure and tight timelines.
• High level of integrity and professionalism.

Additional Information

Cyber Security Professional Office (CSPO)

• Led by an Executive Director and three full-time staff, the CSPO will operationalise and administer the professional accreditation framework, with functions including strategy and planning, operations, partnerships, outreach, accreditation and standards.

Cyber Security Professional Panel (CSPP)

• The CSPP will oversee the CSPO, the accreditation process, and provide industry-relevant guidance for developing standards. Panel members are practitioner leaders from government, industry, and academia.

Expert Committees

• Support the CSPO and CSPP for specific cybersecurity specialisations (e.g. defining baseline standards for VAPT). Committee members are leading subject matter experts and may be drawn from industry and cybersecurity professional bodies.

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities

• Manage high severity incidents and high customer impact incidents focusing on fast recovery
• Champions production resilience and availability, focusing on superior client experience, by working with the operation team and technology development teams
• Drive the implementation of Site Reliability Engineer (SRE) and Chaos Engineering design for all strategic systems
• Drive effective communication between business and technology with regards to production service reliability and performance
• Drive continuous improvements in processes or systems leveraging Site Reliability Engineering methods
• Respond to, evaluate and analyze production incidents to minimize their impact as well as devise innovative solutions to prevent them in the future
• Improve the reliability and availability of systems by gathering hard data, designing systems for increased service reliability and performance
• Provide expert advice and training to our engineers as to which technology solutions and advanced reliability techniques to use on each situation
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Bachelor's degree in Computer Science or related field
• Around 10+ years of relevant experience
• Experience driving major production incidents and organize incident retrospective meetings
• Experience with Core Java 8, Cloud Foundry and non-relational databases, and Linux, Unix systems
• Experience with high availability, high-scale, and performant systems
• Experience with python and Unix scripting

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

Job Description & Requirements

Position Summary

We are seeking a highly skilled Network Security Engineer with Subject Matter Expert (SME)–level expertise in AlgoSec Security Management solutions. The ideal candidate will have expert-level hands-on experience with AlgoSec firewall automation and integration with multiple firewall platforms including Palo Alto, Check Point, Cisco FTD, and FortiGate. This role also requires strong hands-on expertise with enterprise firewalls and will be responsible for firewall rule migrations, automation, and Day 2 operations support in the Network Security domain.

Key Responsibilities

- Serve as SME for AlgoSec, including design, implementation, customization, and ongoing optimization.
- Perform end-to-end firewall rule automation and policy management using AlgoSec.
- Integrate AlgoSec with multiple firewall platforms such as Palo Alto, Check Point, Cisco FTD, and FortiGate.
- Lead and execute firewall rule migrations between different firewall vendors.
- Provide Day 2 operational support for network security infrastructure with a primary focus on firewalls.
- Troubleshoot complex firewall and policy-related issues across heterogeneous environments.
- Collaborate with network, cloud, and application teams to support secure connectivity requirements.
- Ensure compliance with security policies, audit requirements, and industry best practices.
- Create and maintain technical documentation, SOPs, and operational runbooks.

Required Technical Skills

- Expert-level hands-on experience with AlgoSec Firewall Analyzer, Fire Flow, and AppViz (or equivalent modules).
- Strong hands-on expertise with Palo Alto and/or Check Point firewalls (SMElevel preferred).
- Experience working with Cisco FTD and FortiGate firewalls.
- Proven experience in firewall policy design, optimization, and cleanup.
- Strong understanding of network security concepts including ACLs, NAT, VPNs, and routing.
- Experience with firewall rule migration projects across multiple vendors.
- Familiarity with automation, APIs, and integration with ITSM tools is a plus.

Preferred Qualifications

- Industry certifications such as PCNSE,PCCSE, CCNP Security, Fortinet NSE, or AlgoSec certification.
- Experience supporting large enterprise or service provider environments.
- Exposure to cloud security platforms and hybrid network environments.
- Strong analytical, troubleshooting, and problem-solving skills.

Soft Skills

- Strong communication and stakeholder management skills.
- Ability to work independently and lead technical initiatives.
- Detail-oriented with a strong focus on operational excellence and security compliance.

We are looking for a motivated and skilled Security Consultant to join our client's expanding cybersecurity team in Singapore. You will play a key role in assessing and exploiting security vulnerabilities across networks and web applications, helping clients strengthen their security posture through actionable remediation.

Working closely with internal teams and clients, you will conduct thorough vulnerability assessments and penetration tests while staying abreast of emerging threats and offensive security best practices. Your expertise will contribute to both client solutions and internal research initiatives.

Job Requirements:

To excel in this role, candidates should meet the following qualifications:

• Minimally 1 year of hands-on experience in vulnerability assessment, penetration testing, or offensive security.
• Relevant certification, such as OSCP or OSCP+
• Strong knowledge of network protocols, web application architecture, and common vulnerabilities including OWASP Top 10.
• Proficiency with industry-standard tools like Burp Suite, Metasploit, Nmap, and Nessus.
• Excellent analytical, problem-solving, communication, and report-writing skills.

Location: Outram Road (Tan Boon Liat Building) – Client sites islandwide

Salary & Benefits

• Basic Salary: Up to $7,000
• Transport Allowance: Car: $750/month, Motorcycle: $400/month
• Mobile Phone reimbursement
• AWS & Performance Bonus
• 18 Days Annual Leave
• Birthday Leave
• Comprehensive Medical Insurance

Working Hours

• Monday to Friday, 8:30 AM – 6:00 PM
• Night and weekend work may be required depending on operational needs

Job Summary

The Lead Technical Manager will be responsible for managing a group of Technical Officer for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Job Responsibilities:

• Oversee the end-to-end service and maintenance operations for security systems.
• Serve as the primary point of contact for clients on service and maintenance matters.
• Lead and supervise a team of Technical Officers and service personnel.
• Plan and manage service schedules, resource allocation, milestones, and project deliverables.
• Ensure timely completion of maintenance commitments and service requests.
• Manage client relationships, address concerns, and enhance customer satisfaction.
• Coordinate day-to-day operations and support the team in resolving technical and operational issues.
• Maintain and improve documentation of infrastructure, systems, and operational processes.
• Identify opportunities for process improvements, training, and service enhancement.
• Build and maintain strong technical relationships with existing and prospective customers.
• Set team targets, provide guidance, and support staff development and performance management.
• Communicate effectively with stakeholders to evaluate technical solutions and project requirements.
• Handle customer feedback and complaints professionally.
• Perform other duties as assigned by management.

Job Requirements:

• Minimum 6 years related experience with demonstrable record of success
• Good communicator with excellent coordination skills
• Ability to work with multiple discipline projects
• Committed individual with great initiative and strong problem-solving skills
• Diploma or Degree in Electrical / Mechanical Engineering/Computer Science or its equivalents
• Experience in the Security and CCTV industry and exposure to products and operations will be an added advantage

Please submit your updated resume in MS Words format by using the APPLY NOW BUTTON.

**We regret to inform that only shortlisted candidates would be notified.

By submitting your personal data and/or resume, you give consent to collection, use and disclosure of your personal data and/or resume by the company (or its agent) for the purpose of the processing and administration by company relating to this job application.

https://www.mci.com.sg/wp-content/uploads/2025/09/MCI-Job-Applicant-Data-Protection-Notice.pdf

Kenneth Isaac Peter
Registration Number: R25127720
MCI Consulting Pte Ltd (EA Licence: 13C6730)

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines