Total 3,280 Full-time security analyst job vacancies

Location: Changi AIrport
Salary: $2,800 – $3,100 per month
Working days: 4 days work 2 days off OR 5 days work 1 day off

Responsibilities
• Manning of static/access control points
• Checking of passes and other documents at static/access points
• Screening and checking of all personnel and vehicles entering and exiting the premises
• Patrolling and guarding client’s personnel and properties
• Operating metal/explosive detectors/x-ray machines at checkpoints
• Issuing of visitor/contractor pass in exchange for their identification cards
• Attending to alarm activation
• CCTV Monitoring
• Responding to incidents such as unattended bags, etc.
• Maintaining records of all incidents
• Checking of boarding, staff, and valid entry passes

Benefits
• Full-time: Attractive salary package – Up to SGD3,600*
• 12hrs shift work (can be rotating or perm)
• Joining bonus up to $3500*
• Yearly Increment*
• Fully sponsored WSQ certified security training
• Comprehensive medical and dental benefits, etc

Job Description & Requirements

Position Summary

We are seeking a highly skilled Network Security Engineer with Subject Matter Expert (SME)–level expertise in AlgoSec Security Management solutions. The ideal candidate will have expert-level hands-on experience with AlgoSec firewall automation and integration with multiple firewall platforms including Palo Alto, Check Point, Cisco FTD, and FortiGate. This role also requires strong hands-on expertise with enterprise firewalls and will be responsible for firewall rule migrations, automation, and Day 2 operations support in the Network Security domain.

Key Responsibilities

- Serve as SME for AlgoSec, including design, implementation, customization, and ongoing optimization.
- Perform end-to-end firewall rule automation and policy management using AlgoSec.
- Integrate AlgoSec with multiple firewall platforms such as Palo Alto, Check Point, Cisco FTD, and FortiGate.
- Lead and execute firewall rule migrations between different firewall vendors.
- Provide Day 2 operational support for network security infrastructure with a primary focus on firewalls.
- Troubleshoot complex firewall and policy-related issues across heterogeneous environments.
- Collaborate with network, cloud, and application teams to support secure connectivity requirements.
- Ensure compliance with security policies, audit requirements, and industry best practices.
- Create and maintain technical documentation, SOPs, and operational runbooks.

Required Technical Skills

- Expert-level hands-on experience with AlgoSec Firewall Analyzer, Fire Flow, and AppViz (or equivalent modules).
- Strong hands-on expertise with Palo Alto and/or Check Point firewalls (SMElevel preferred).
- Experience working with Cisco FTD and FortiGate firewalls.
- Proven experience in firewall policy design, optimization, and cleanup.
- Strong understanding of network security concepts including ACLs, NAT, VPNs, and routing.
- Experience with firewall rule migration projects across multiple vendors.
- Familiarity with automation, APIs, and integration with ITSM tools is a plus.

Preferred Qualifications

- Industry certifications such as PCNSE,PCCSE, CCNP Security, Fortinet NSE, or AlgoSec certification.
- Experience supporting large enterprise or service provider environments.
- Exposure to cloud security platforms and hybrid network environments.
- Strong analytical, troubleshooting, and problem-solving skills.

Soft Skills

- Strong communication and stakeholder management skills.
- Ability to work independently and lead technical initiatives.
- Detail-oriented with a strong focus on operational excellence and security compliance.

We are looking for a motivated and skilled Security Consultant to join our client's expanding cybersecurity team in Singapore. You will play a key role in assessing and exploiting security vulnerabilities across networks and web applications, helping clients strengthen their security posture through actionable remediation.

Working closely with internal teams and clients, you will conduct thorough vulnerability assessments and penetration tests while staying abreast of emerging threats and offensive security best practices. Your expertise will contribute to both client solutions and internal research initiatives.

Job Requirements:

To excel in this role, candidates should meet the following qualifications:

• Minimally 1 year of hands-on experience in vulnerability assessment, penetration testing, or offensive security.
• Relevant certification, such as OSCP or OSCP+
• Strong knowledge of network protocols, web application architecture, and common vulnerabilities including OWASP Top 10.
• Proficiency with industry-standard tools like Burp Suite, Metasploit, Nmap, and Nessus.
• Excellent analytical, problem-solving, communication, and report-writing skills.

• Support regional pricing activities through data analysis and structured pricing processes

• Assist in developing and improving pricing tools, models, and methodologies

• Lead or support pricing improvement initiatives as directed by management

• Conduct pricing analysis to support revenue optimisation and price adjustments

• Monitor pricing KPIs to identify trends, risks, and business opportunities

• Work closely with business units, country teams, and finance to ensure consistent pricing governance

• Support implementation of value-based pricing strategies and change initiatives

• Contribute to continuous improvement of pricing processes and performance

Interested applicants may email resume to kellychooi@recruitexpress.com.sg

Chooi Kelly (CEI Registration No: R25136207)

Recruit Express Pte Ltd (EA: 99C4599)

We regret only shortlisted candidates will be contacted

Job Objectives

Analyze and translate business, regulatory, and analytics requirements into scalable data and solution designs. Drive effective stakeholder communication, effort estimation, and validation processes, while enabling data architectures and curation strategies that support reporting, analytics, and AI/NLP-driven use cases.

Key Responsibilities

• Perform detailed effort estimation for projects and change requests.
• Communicate complex technical and architectural concepts to business and senior stakeholders in a clear, simplified manner
• Review and approve test strategies, functional test cases, and data validation approaches.
• Experience translating business and compliance requirements into NLP‑enabled analytical use cases, such as: Text classification and categorization, Entity extraction, Risk indicator identification, Summarization of alerts, cases, or documents
• Ability to translate business, regulatory, and analytics requirements into logical data layering and curation strategies that support reporting, analytics, and AI/NLP use cases
• Analyze business and regulatory requirements and translate them into scalable solution designs.
• Perform detailed effort estimation for projects and change requests.
• Communicate complex technical and architectural concepts to business and senior stakeholders in a clear, simplified manner
• Review and approve test strategies, functional test cases, and data validation approaches.
• Ability to design data architectures supporting NLP and AI‑driven analytics, including ingestion, curation, and governance of unstructured data within Data Lake, Data warehouse platforms.
• Experience translating business and compliance requirements into NLP‑enabled analytical use cases, such as: Text classification and categorization, Entity extraction, Risk indicator identification, Summarization of alerts, cases, or documents
• Ability to translate business, regulatory, and analytics requirements into logical data layering and curation strategies that support reporting, analytics, and AI/NLP use cases

Key Skills:

• Bachelor’s or Master’s degree in Computer Science, Engineering, Information Technology, or a related field.
• Minimum of 9+ years of professional experience
• Requirement Analysis & Solution Design
• Data Architecture & Data Modeling
• AI / NLP Use Case Enablement
• Testing & Data Validation
• Stakeholder Communication
• Effort Estimation & Planning

Location: Outram Road (Tan Boon Liat Building) – Client sites islandwide

Salary & Benefits

• Basic Salary: Up to $7,000
• Transport Allowance: Car: $750/month, Motorcycle: $400/month
• Mobile Phone reimbursement
• AWS & Performance Bonus
• 18 Days Annual Leave
• Birthday Leave
• Comprehensive Medical Insurance

Working Hours

• Monday to Friday, 8:30 AM – 6:00 PM
• Night and weekend work may be required depending on operational needs

Job Summary

The Lead Technical Manager will be responsible for managing a group of Technical Officer for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Job Responsibilities:

• Oversee the end-to-end service and maintenance operations for security systems.
• Serve as the primary point of contact for clients on service and maintenance matters.
• Lead and supervise a team of Technical Officers and service personnel.
• Plan and manage service schedules, resource allocation, milestones, and project deliverables.
• Ensure timely completion of maintenance commitments and service requests.
• Manage client relationships, address concerns, and enhance customer satisfaction.
• Coordinate day-to-day operations and support the team in resolving technical and operational issues.
• Maintain and improve documentation of infrastructure, systems, and operational processes.
• Identify opportunities for process improvements, training, and service enhancement.
• Build and maintain strong technical relationships with existing and prospective customers.
• Set team targets, provide guidance, and support staff development and performance management.
• Communicate effectively with stakeholders to evaluate technical solutions and project requirements.
• Handle customer feedback and complaints professionally.
• Perform other duties as assigned by management.

Job Requirements:

• Minimum 6 years related experience with demonstrable record of success
• Good communicator with excellent coordination skills
• Ability to work with multiple discipline projects
• Committed individual with great initiative and strong problem-solving skills
• Diploma or Degree in Electrical / Mechanical Engineering/Computer Science or its equivalents
• Experience in the Security and CCTV industry and exposure to products and operations will be an added advantage

Please submit your updated resume in MS Words format by using the APPLY NOW BUTTON.

**We regret to inform that only shortlisted candidates would be notified.

By submitting your personal data and/or resume, you give consent to collection, use and disclosure of your personal data and/or resume by the company (or its agent) for the purpose of the processing and administration by company relating to this job application.

https://www.mci.com.sg/wp-content/uploads/2025/09/MCI-Job-Applicant-Data-Protection-Notice.pdf

Kenneth Isaac Peter
Registration Number: R25127720
MCI Consulting Pte Ltd (EA Licence: 13C6730)

We are seeking an experienced IT Business Analyst to join a leading banking organisation and play a key role in delivering innovative digital banking solutions. This position will work closely with business stakeholders, product owners, architects, and technology teams to translate business requirements into scalable digital solutions that enhance customer experience across banking channels.

The ideal candidate will have a strong background in digital banking platforms, API integration, and end-to-end Software Development Life Cycle (SDLC) delivery within a banking environment.

Key Responsibilities

• Collaborate with business stakeholders to gather, analyse, and document business and system requirements.

• Facilitate workshops and requirement elicitation sessions with business users, product teams, and technology stakeholders.

• Translate business needs into functional and technical specifications, user stories, process flows, and use cases.

• Work closely with solution architects, developers, and QA teams throughout the SDLC to ensure successful delivery.

• Analyse and define API requirements, integration flows, and system interfaces across digital banking ecosystems.

• Support solution design discussions and ensure requirements align with business objectives and technology standards.

• Participate in system testing, UAT, defect triage, and production implementation activities.

• Identify process improvement opportunities and recommend digital solutions to enhance customer and operational outcomes.

• Ensure compliance with banking, security, and regulatory requirements.

Required Experience & Skills

• Minimum 8 years of experience as an IT Business Analyst, Systems Analyst, or Technical Business Analyst.

• Proven experience delivering Digital Banking initiatives within Banking or Financial Services.

• Strong understanding of end-to-end SDLC methodologies, including Agile and Waterfall delivery frameworks.

• Hands-on experience working with APIs, integration services, microservices, and system interfaces.

• Good understanding of digital banking channels, including:

  • Internet Banking

  • Mobile Banking

  • Digital Onboarding

  • Payments & Transfers

  • Customer Self-Service Platforms

  • Authentication and Security Solutions

• Experience creating Business Requirements Documents (BRD), functional specifications, process maps, user stories, and acceptance criteria.

• Strong stakeholder management and communication skills with the ability to engage both business and technical audiences.

• Experience using tools such as Jira, Confluence, Visio, Swagger/Postman, or equivalent.

• Knowledge of Open Banking, API ecosystems, and modern banking architectures will be highly regarded.
  

  Interested candidates please email your latest resume to subagio@tangspac.com

Job Summary

Role Overview

You will partner with senior leadership to shape, execute, and communicate the institute’s strategic direction. Reporting to Senior Director, Strategy, you will play a central role in strategic planning, research portfolio development, and market and technology sensing — translating big-picture priorities into actionable plans that drive real outcomes.

Key Responsibilities

• Develop the institute’s overall strategy, including vision, priorities, research focus areas, and long-term growth plans.
• Lead the creation and refresh of strategy documents, annual workplans, research roadmaps, and implementation plans.
• Translate strategic priorities into programmes, milestones, KPIs, resource plans, and cross-functional workstreams.
• Oversee the planning cycle, including leadership offsites, strategy retreats, and annual planning sessions.
• Engage internal and external stakeholders to drive strategic alignment and collaboration.
• Build and lead a high-performance, engaged, multi-disciplinary team.

Requirements

• Advanced degree in science, engineering, technology, business, public policy, or a related field; PhD, MBA, or equivalent experience is advantageous.
• Significant experience in strategy, corporate planning, research management, consulting, or public-sector planning.
• Strong ability to translate complex scientific, organisational, and policy issues into clear priorities, workplans, and executive recommendations.
• Excellent stakeholder management and communication skills, with experience engaging senior leaders, research teams, and external partners.

Career Growth & Impact

• Shape national R&D priorities. You will directly influence how one of Asia’s leading public research organisations invests in science and technology — from AI and sustainability to advanced manufacturing.
• Work at the leadership table. You will partner with institute directors, government agencies, and ecosystem leaders, building a high-level network across Singapore’s innovation landscape.
• See your strategy come to life. Unlike advisory roles, you will own the end-to-end journey from strategy formulation to execution — roadmaps, KPIs, resource plans, and cross-team delivery.
• Grow into senior leadership. This role is a launchpad into senior R&D leadership, national science policy, or C-suite strategy positions.

1 year contract
Jurong East
Mon - Fri, 9am to 6pm

Up to $7,000 + 1 month completion bonus

Duties:

• Support strategic pricing foundation through pricing science, tools and processes.
• Lead pricing improvement projects as prioritized by the Manager PricingExcellence
• Provide analytical support to help drive value capture and annual price increases
• Tracking of pricing KPIs to identify trends, risks, and opportunities
• Collaborate closely with Business Units, Country Pricing and Finance teams to ensure pricing governance consistency
• Support change management initiatives as the organization evolves into a value-based pricing culture.

Requirements:

• Minimum Degree in relevant fields
• Certified Pricing Professional Certificate Preferred, not a must.
• Minimum 3 years pricing experience, commercial analysis or similar roles.
• Any experience in Pricing Optimization / Analytics: Vendavo , Zilliant PROS, Model N, etc.
• Any experience in Configure-Price-Quote platforms such as Oracle , Salesforce etc.

Jessica Nguyen Huynh Thanh Truc

CEI Reg. No. R23113787

EA License No. 99C4599

We regret that only shortlisted candidates will be notified.

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities

• Work with infra and app teams on requirement gathering to implementation, for all the BAU activities.
• Review and analyze infrastructure changes and identify the gaps, for all the BAU activities.
• Perform all infra change activities (BAU and non-BAU). These include routers, switches, load balancers, firewalls, proxy, DNS and etc.
• Perform Network and Firewall patching and other administration tasks.
• Guide app team to troubleshoot infra related issues.
• Be the SME for Network and Firewall administration and automation.

Operation& Process:

• Collaborates with Application teams and other infra teams to develop technical solutions and enhancements.
• Drive the onboarding of new applications on to the production environment.
• Assist to deploy, maintain, and enhance the security of all infrastructure systems through administrative, preventive, detective, and reactive controls, such as change and configuration management, anti-virus measures, patch management, and system scans.
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Bachelor's degree in relevant field (e.g., Computer Science, Information Technology, Engineering).
• Around 8 years’ experience providing network operational and administration support for Cisco, Arista, F5, Huawei, Checkpoint, Infoblox, Fortinet (firewall & proxy) products.
• Knowledge in network routing and switching protocols, and its related technologies.
• Knowledge in network security, load balancing and optimization technologies.
• Able to work extended hours and perform standby duty after office hours when required.
• Possess good technical problem-solving and troubleshooting skills.
• Attention to detail and well-versed in documentation.
• Hands on experience in Cloud computing, Microsoft Dynamics CRM, Office365 is an added advantage.
• Minimum CCNA/CCNP certification or equivalent is essential.
• Other network/firewall/DNS/F5/proxy certification will be an added advantage.
• Able to work as a team player, as well as independently.

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

“We are hiring Sales Audit Analyst to be outsourced to our clients”.

Responsibilities

• Perform checks and fulfil all relevant requirements under the MAS Balanced Scorecard Framework (such as client surveys, document checks, mystery shops, FAA complaints assessment) for sales representatives and the Bank’s policies and procedures.

• Monitor the BSC results, identify root causes of significant lapses and common errors, and pursue remediation.

• Conduct training on BSC Framework for new hires, and guide new supervisors on BSC checks and complaint investigation.

• Provide independent review of customer complaints relating to investment sales.

• Keep checks current with developments in the regulatory environment and the internal processes and systems.

• Automate independent sales audit workflow by leveraging on RPA, system automation and AI.

Job Requirements:
- Minimum Degree in relevant field

- Good level of knowledge of the regulations governing the sale of investment products to retail customers (egs. Financial Advisory Act, MAS Guidelines on FairDealing).

Interest applicants, pls email updated resume to north@recruitexpress.com.sg

Thomas Tan

The Outsourcing Team

Recruit Express Pte Ltd

EA Lic: 99C4599

Your new company

This is a reinsurance company.

Your new role

• Drive the review and documentation of the current-state operating model, including structure, governance, processes, decision rights, controls, systems, and performance metrics.
• Facilitate stakeholder interviews, workshops, and discovery sessions to gather business requirements and identify pain points, dependencies, and opportunities for improvement.
• Prepare process maps, hand-off documentation, supporting analysis for assigned workstreams/roles, and service journeys to support evidence-based design decisions.
• Drive the documentation of agreed future-state requirements, process changes, and implementation activities, the development of target operating model options, including capability definitions, process design, role clarity, governance forums, and service delivery approaches
• Work with programme, change technology, and business teams to ensure operating model designs are practical, traceable, and implementable.

What you'll need to succeed

• Proven experience in business analysis and transformation, operating model design, process improvement, project coordination, or implementation programmes. Experience in regulated financial services or similarly complex environments is preferred.
• Strong understanding of operating model components such as governance, organisation design, processes, service models, controls, data, and technology enablement,
• Ability to document business requirements, process maps, user stories, and decision papers to a high standard.
• Strong facilitation, stakeholder management, and communication skills across both operational and senior audiences.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email Shabnam.Bahar@hays.com.sg for a confidential discussion. Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities

• Work with infra and app teams on requirement gathering to implementation, for all the BAU activities.
• Review and analyze infrastructure changes and identify the gaps, for all the BAU activities.
• Perform all infra change activities (BAU and non-BAU). These include routers, switches, load balancers, firewalls, proxy, DNS and etc.
• Perform Network and Firewall patching and other administration tasks.
• Guide app team to troubleshoot infra related issues.
• Be the SME for Network and Firewall administration and automation.
• Any other ad-hoc duties as assigned by supervisors

Operation& Process:

• Collaborates with Application teams and other infra teams to develop technical solutions and enhancements.
• Drive the onboarding of new applications on to the production environment.
• Assist to deploy, maintain, and enhance the security of all infrastructure systems through administrative, preventive, detective, and reactive controls, such as change and configuration management, anti-virus measures, patch management, and system scans.

Requirements:

• Bachelor's degree in relevant field (e.g., Computer Science, Information Technology, Engineering).
• Around 8 years’ experience providing network operational and administration support for Cisco, Arista, F5, Huawei, Checkpoint, Infoblox, Fortinet (firewall & proxy) products.
• Knowledge in network routing and switching protocols, and its related technologies.
• Knowledge in network security, load balancing and optimization technologies.
• Able to work extended hours and perform standby duty after office hours when required.
• Possess good technical problem-solving and troubleshooting skills.
• Attention to detail and well-versed in documentation.
• Hands on experience in Cloud computing, Microsoft Dynamics CRM, Office365 is an added advantage.
• Minimum CCNA/CCNP certification or equivalent is essential.
• Other network/firewall/DNS/F5/proxy certification will be an added advantage.
• Able to work as a team player, as well as independently.

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines