Total 191 operations engineer job vacancies in Legal / Public / Security category in The Philippines

Job Description

We are seeking a committed and responsible Operations Executive to support and coordinate security operations across multiple sites. The successful candidate will assist with manpower deployment, site supervision and daily operational matters while ensuring that company and regulatory requirements are met.

Key Responsibilities

Operations Coordination

• Coordinate the daily deployment of security officers across assigned sites
• Prepare and manage duty rosters and manpower arrangements
• Monitor attendance and ensure that sufficient manpower is deployed
• Conduct regular site visits and assist with daily operational matters
• Arrange relief officers or replacements when required

Compliance and Site Management

• Ensure that security operations comply with company policies and regulatory requirements
• Monitor officers’ PLRD licensing and deployment requirements
• Conduct site inspections and report any operational issues
• Ensure that security equipment and systems are operational and properly maintained
• Assist with incident reporting and follow-up actions

Staff Coordination

• Provide guidance and operational support to security personnel
• Conduct on-site briefings and monitor officers’ performance
• Address attendance, deployment and manpower issues promptly
• Escalate serious operational matters to management when necessary

Client and Management Coordination

• Liaise with clients regarding site operations and service delivery
• Provide operational updates, incident reports and manpower status reports to management
• Act as a point of contact for site-related operational matters
• Perform other related duties as assigned

REQUIREMENTS

• Minimum 2 years of experience in security operations, manpower deployment or a supervisory role is preferred
• Possess a valid PLRD licence where applicable
• Basic knowledge of security regulations and operational procedures
• Able to prepare duty rosters and coordinate manpower deployment
• Good communication and interpersonal skills
• Responsible, organised and able to handle operational issues promptly
• Able to travel between multiple sites in Singapore
• Preferably possess own transport to travel between sites efficiently
• Able to work on a rostered schedule, including weekends and Public Holidays when required

SKILLS

• Security Operations
• Manpower Deployment
• Duty Rostering
• Licensing
• Access Control
• Compliance
• Risk Management
• Incident Reporting
• Site Inspections
• Security Surveillance Management
• Monitoring CCTV
• Communication Skills
• Management Skills
• Problem Solving
• Team Player

HOW TO APPLY

Interested candidates may submit their CV via:

Email: hr@suitssecurity.com
WhatsApp: 8036 2434

about company

I am currently working with a software consultancy firm that provides premium software development and strategy expertise to a wide spectrum of clients. Projects related to Gaming/Gambling/Blockchain.

Base + AWS + variable bonus. Hybrid working, Friday WFH. Office at CBD.

about job (1 opening for Cloud Security Engineer, 1 opening for Lead level)

• Protects system by defining access privileges, control structures, and resources.

• Safeguards information system assets by identifying and solving potential and actual security problems.

• Recognizes problems by identifying abnormalities; reporting violations.

• Determines security violations and inefficiencies by conducting periodic audits.

• Consolidate root cause analysis of past pentest results.

• Upgrades system by implementing and maintaining security controls.

skills and requirements

• Min 3 years experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.

• Strong understanding of SSDLC and security frameworks.

• Knowledge in OWASP Security Standards.

• In-depth knowledge of architecture, engineering, and operations of at least one enterprise IDS/IPS/SIEM platform.

• Hands on experience with vulnerability scanning and pentesting tools.

• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.

• Experience with IAM architectures and solutions including AD, RBAC, SSO, identity lifecycle management

• Mandarin speaking required as you need to liaise with Chinese counterparts who can only speak and write in Mandarin

To apply online please use the 'apply' function, alternatively you may contact Stella at 96554170 (EA: 94C3609 /R1875382)

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Required Skills & Qualifications

• Strong hands-on experience with:
• IBM Watsonx (Watsonx.ai, Watsonx.data, Watsonx Orchestrate)
• QRadar SIEM
• IBM Resilient SOAR
• Experience in:
• AI/ML integration or LLM-based applications
• Prompt engineering and automation workflows
• Proficiency in:
• Python / APIs / automation frameworks
• Strong understanding of:

• SOC operations (incident response, threat analysis)

  • Fully functional and optimized AI-driven automation agents
  • Integration with QRadar and Resilient platforms
  • Documentation of workflows and configurations
  • Production deployment support and knowledge transfer

YOUR NEW JOB

As a Cyber Security Resident, you will be deployed onsite to support a clients security operations environment.
You will monitor security alerts, investigate incidents, support compliance activities, and work closely with internal teams to strengthen the client's security posture.
This is a 12-month renewable contract role. Work will be in office, Mon - Fri office.

WHAT YOULL BE DOING

• Monitor and investigate security alerts, incidents, and suspicious activities
• Respond to security incidents and support remediation activities
• Work with engineers and internal stakeholders to resolve security issues
• Implement and maintain security controls, policies, and procedures
• Generate reports from security monitoring and reporting tools
• Support security audits, compliance activities, and ISO 27001 documentation
• Follow up with stakeholders on security-related actions and findings
• Maintain security documentation, reports, and operational records

WHAT IS NEEDED FROM YOU

• 1-2 years of experience in IT support, infrastructure, security operations, or cybersecurity roles
• Basic understanding of cybersecurity concepts, security monitoring, and incident response
• Familiarity with security tools, security alerts, and log analysis
• Understanding of networks, servers, and IT infrastructure fundamentals
• Good troubleshooting and problem-solving skills
• Strong communication and stakeholder management skills

WHAT WILL MAKE YOU STAND OUT

• Experience in SOC, cybersecurity monitoring, or incident response environments
• Exposure to SIEM, EDR, vulnerability management, or security reporting tools
• Knowledge of ISO 27001, cybersecurity frameworks, or security compliance processes
• Relevant cybersecurity certifications such as Security+, SC-900, or equivalent
• Experience working onsite within client environments

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :

8:30am to 6pm (Monday to Friday) onsite, no hybrid option.

About Company

An international technology powerhouse that focuses on high-tech engineering and infrastructure protection. They design and deliver advanced safety and defense mechanisms for essential public and private utility frameworks.

About Job

• Architect Security Measures: Build and integrate protective frameworks tailored specifically for automated industrial control systems.

• Oversee Rollouts: Guide engineering squads and coordinate closely with clients throughout the entire project lifecycle to ensure defense standards are met.

• Neutralize Vulnerabilities: Formulate proactive remediation strategies and upgrade network architectures to minimize operational downtime and risks.

• Investigate Anomalies: Provide deep technical analysis during active security breaches and lead subsequent post-mortem forensic evaluations.

• Monitor Landscape: Keep track of the evolving global threat matrix and regulatory changes to continually upgrade existing protection models.

Requirements

• Domain Track Record: At least 6 years of professional experience navigating the intersection of corporate IT and industrial operational technology networks.

• Supervisory Background: Demonstrated history of managing engineering personnel and leading multi-tiered deployment initiatives.

• Core Systems Literacy: Comprehensive grasp of automated industrial environments, including centralized control systems and programmable logic units.

• Defense Toolkits: Deep familiarity with perimeter defense, endpoint protection, user access management, and traffic monitoring tools.

• Compliance & Frameworks: Sound understanding of international cybersecurity benchmarks, compliance audits, and architectural blueprints.

• Interpersonal Skills: Exceptional analytical capabilities paired with the ability to translate technical jargon for non-technical business units.
  

  To apply online please use the 'apply' function, alternatively you may contact Evangeline. (EA: 94C3609/ R24124002)

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Vulnerability Management Operations is responsible for the firm-wide impact analysis, overall risk assessment, and coordination/communication of critical vulnerabilities identified as impacting JPMorgan Chase applications and/or infrastructure components. This function is performed globally and at the scale of which JPMC operates by coordinating a response that could be firm-wide or application specific. The team’s actions are performed using a risk-based approach considering the criticality of the vulnerability and the ability for our Line of Business partners to service their clients and customers globally.

As a Security Operations Vice President in Cybersecurity & Tech Controls, Vulnerabilities Management Team, you will be a key member of the Singapore team, as part of a follow-the-sun global team. You will work directly with Line of Business Application Teams, Subject Matter Experts, Production Management Teams, Product Owners, Senior Technology Management, External Vendors and Risk and Control functions. You’ll be on the front lines of managing vulnerabilities by making critical decisions on the inherent risk to the infrastructure or the application itself and thus the risk to the firm clients & customers. You will be working with a highly-motivated team laser-focused on analyzing, scoping, developing and delivering solutions built to stop adversaries and strengthen our security posture. Your research and work will ensure stability and resiliency of our current technology products, emerging technology and our vast application estate. Working in tandem with various internal teams both in Cyber and various Line of Business partners, as well as technologists and innovators across our global network, by leading the positive actions that will stop adversaries and strengthen customer’s confidence.

Job responsibilities

• Review new vulnerabilities published from multiple sources and identify those that may pose risk to the firm.

• Define an accurate risk rating in line with proprietary and industry standard risk rating methodologies.

• Uses enterprise-authorized AI capabilities within the work environment to accelerate security investigation triage and incident reporting, validating outputs and handling operational data according to sensitivity and security requirements.

• Document impacted assets and/or application(s) providing a detailed write up on the risk and exposure posed by vulnerabilities.

• Assess threat actor intelligence, exploit code, and/or conceptual code to determine attack vectors.

• Recommend any risk mitigation factors and define the remediation activity if known.

• Assess security researcher identified vulnerabilities to provide recommendations on remediation and identify additional risk

• Leverage AI tools to accelerate the triage and assessment of vulnerabilities, as well as improve the process workflow and documentation quality.

• Drive global teams’ daily workflows through case-load analysis and prioritization, while serving as the technical lead and representative on major incidents impacting the Vulnerability Management space.

• Demonstrate the ability to develop and form strong working relationships with the partnering Cybersecurity Operations functions and key technology leaders in the region.

• Drives reuse-first adoption of AI-assisted workflows to enhance threat detection and response processes, ensuring outputs are validated and aligned to security, resiliency, and auditability expectations.

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines

• 5+ years’ experience in a Cyber Operations/Vulnerability Management role with a strong knowledge of operational processes supporting Vulnerability Management and the wider Security Operations Center; with the ability to demonstrate comprehension of the end-to-end Vulnerability Management workflow (to include industry standards such as CVE, CPE, CVSS).

• Demonstrated experience coordinating Incident Management and/or cyber incident response, including cross-team alignment and clear stakeholder communications.

• Strong and broad understanding of Cyber Security Controls (Physical, Logical, Processes and Procedures).

• Strong and broad understanding of leading vendor products/applications e.g., Oracle [Java], VMWare, F5, Citrix, Microsoft; to include product lifecycle & release schedules.

• Strong and broad understanding of open-source software deployment in a large technology estate.

• Strong understanding of cloud (public and private) environments, along with familiarity in cyber vulnerability detection and scanning tools.

• Experience working with data sources using SQL, JSON, APIs, and Splunk, alongside Agile practices, including managing remediation actions through an active backlog and Jira.

• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security operations workflows with strong validation habits and awareness of data sensitivity.

• Ability to review and validate AI-assisted investigation findings and recommendations before implementation, escalating when uncertain and ensuring outcomes align to security and auditability expectations.

• Previous 24 x 7 operations experience.

Preferred qualifications, capabilities, and skills

• Have an aptitude for Vulnerability Research and Exploit Development (either from a professional background or by demonstrating an aptitude e.g. through capture the flag challenges).

• Experience with frontier AI models and the ability to conduct AI assisted vulnerability research.

• Be operationally focused and enjoy working in a dynamic environment, with the day-to-day focus on quick and timely risk reduction activities.

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=a3671653f1a8b0d004a36b1479871162

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :

8:30am to 6pm (Monday to Friday) onsite, no hybrid option.

This role focuses on building, integrating, and automating security systems to strengthen detection and response capabilities across on-premise, cloud, and network environments.

Core Responsibilities

1. Design, implement, and integrate security tools across enterprise environments

2. Build and maintain telemetry pipelines into SIEM and detection platforms

3. Support onboarding of systems into security monitoring

4. Implement and manage vulnerability scanning and remediation workflows

5. Work with SOC teams to translate operational gaps into engineering improvements

6. Support incident response and post-incident remediation

Core Requirements

1. Degree in Cybersecurity, IT, Computer Engineering or related field

2. At least 5 years of experience in Security Engineering, DevOps, or platform engineering

3. Experience with enterprise security technologies (e.g. SIEM, SOAR, EDR, cloud security)

4. Proficiency in scripting or automation (e.g. Python, PowerShell)

5. Strong understanding of networking and security telemetry

6. Experience implementing or integrating security platforms (e.g. SIEM, telemetry, cloud security tools)

7. Experience working in multinational or large enterprise environments

8. Ability to deliver engineering outcomes independently

Job Title: Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer

Employment Period: August/September 2026 to March 2027, with possible yearly renewal
Location: 1 Fusionopolis Way
Working Hours: Monday to Friday, 8:30am to 6:00pm
Engagement Type: Contract / Renewable Term

Role Overview
We are seeking a Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer to support Data Loss Prevention alert monitoring, incident handling, investigation, reporting, user support, and policy improvement activities.

The successful candidate will work closely with security operations, service desk, data owners, business users, compliance teams, and Microsoft Purview SMEs to ensure DLP alerts are properly monitored, investigated, classified, documented, escalated, and improved through continuous policy tuning.

Key Responsibilities

DLP Alert Monitoring & Incident Handling
Monitor DLP alerts from Microsoft Purview DLP Dashboard, Microsoft Defender XDR, email notifications, service desk tickets, and related alerting channels.

Log, track, triage, and classify DLP alerts, including initial investigation of true positives and false positives.

Perform first-level analysis and escalate high-risk or complex incidents to L2 security operations, L3 Purview SMEs, architects, compliance, legal, or other relevant stakeholders where required.

Investigation & Analysis
Perform detailed analysis of DLP incidents to identify root causes, including user behaviour, policy gaps, data misclassification, or process issues.

Validate and document false positives clearly to support policy improvement and operational reporting.

Support forensic analysis and evidence gathering for high-risk DLP incidents where required.

Escalation & Stakeholder Coordination
Coordinate with SOC teams, service desk, business units, data owners, compliance, legal, and IT stakeholders to ensure DLP incidents are handled appropriately and within expected timelines.

Communicate DLP-related issues clearly to both technical and non-technical users.

Policy Tuning & Change Management
Work with L3 SMEs and architects to recommend improvements to DLP policies based on repeated alerts, user feedback, threat trends, false positive patterns, and post-incident findings.

Support DLP change management activities arising from new regulatory requirements, new workloads such as Teams, Copilot or SaaS applications, and post-incident improvements.

Provide practical recommendations to improve DLP policy effectiveness and reduce unnecessary business disruption.

User Support & Awareness
Respond to user-reported DLP issues, including blocked activities, policy alerts, and suspected false positives.

Provide guidance to users on compliant data handling and proper use of sensitive information.

Support communication and awareness activities related to DLP policy enforcement.

Monitor and ensure the AI agent is running and responding correctly where applicable.

Reporting & Continuous Improvement
Prepare periodic DLP reports covering alert volumes, top users triggering policies, false positive rates, policy effectiveness trends, recurring issues, and recommended improvements.

Maintain proper documentation of investigations, findings, escalations, and closure actions.

Technical Skills Required
Strong hands-on knowledge of Microsoft Purview DLP is mandatory.

Experience in Microsoft Purview policy configuration, troubleshooting, alert review, and operational support.

Good understanding of DLP across Endpoint, Exchange, SharePoint, Teams, and Microsoft 365 workloads.

Knowledge of Microsoft Defender XDR, Microsoft 365 Compliance Portal, Microsoft Entra, sensitivity labels, data classification, and information protection.

Microsoft Intune experience will be an added advantage.

Operational & SOC Skills
Experience in incident triage, investigation, security alert analysis, ticket handling, true/false positive determination, and basic log analysis.

Experience with ticketing tools such as ServiceNow or similar platforms.

Ability to work with SOC, service desk, compliance, legal, and business stakeholders.

Data Security & Compliance Knowledge
Good understanding of data protection, data classification, data exfiltration risks, insider risk awareness, and DLP control concepts.

Knowledge of Singapore PDPA and data protection practices will be advantageous.

Soft Skills
Strong communication skills with business users and technical stakeholders.

Ability to explain DLP blocks, alerts, and policy enforcement in a professional and user-friendly manner.

Strong analytical thinking, root-cause analysis, documentation, and coordination skills.

Able to work independently while escalating appropriately when needed.

Experience Requirement
3 to 5 years of experience in Microsoft 365, Microsoft Purview, DLP, security operations, end-user support, or L2 support.

Hands-on experience supporting Microsoft Purview DLP in an enterprise environment is strongly preferred.

Preferred Certifications
Microsoft SC-400: Information Protection Administrator
Microsoft SC-200: Security Operations Analyst
Microsoft MS-102: Microsoft 365 Administrator
Microsoft SC-300: Identity and Access Administrator

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines