Security Engineer (1-year renewable contract)

Key Responsibilities

• Perform security control validation and effectiveness testing across cloud platforms and services.
• Develop, implement, and maintain cloud security controls in alignment with approved security architecture and organisational security standards.
• Apply security-by-design principles across cloud infrastructure, applications, and technology implementations.
• Assess cloud environments against internal security policies, security baselines, and regulatory requirements, identifying compliance gaps and areas for improvement.
• Configure and manage cloud-native security services, IAM, monitoring capabilities, and security automation tools.
• Review cloud configurations to identify security weaknesses, misconfigurations, vulnerabilities, and compliance gaps, and drive appropriate remediation.
• Collaborate with Security Architects and technology teams to translate security requirements and architectural designs into practical technical controls and operational procedures.
• Support vulnerability management activities, including remediation tracking, risk assessment, and validation of corrective actions.
• Participate in cloud security risk assessments and recommend appropriate risk mitigation measures.
• Conduct security control reviews for new cloud services, infrastructure deployments, applications, and technology implementations.
• Develop and maintain cloud security standards, procedures, guidelines, and technical documentation.
• Support security incident investigations, providing technical expertise during containment, remediation, and post-incident activities.
• Automate security controls, compliance checks, monitoring, and reporting where practical.
• Stay up to date with emerging cloud security threats, vulnerabilities, technologies, and industry best practices, recommending improvements to the organisation's cloud security posture.

Key Requirements

• Min 3 years of experience in Cloud Security, Cybersecurity, Infrastructure Security, or a related security engineering role.
• Strong understanding of cloud security principles, architectures, and security controls across Google Cloud Platform (GCP) and/or Microsoft Azure.
• Hands-on experience implementing, configuring, and validating cloud security controls.
• Strong knowledge of cloud-native security services, IAM, network security, encryption, logging, monitoring, and security operations.
• Good understanding of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.
• Experience with vulnerability management, security assessments, configuration reviews, and security assessment tools.
• Hands-on experience with Infrastructure as Code (IaC) and familiarity with DevSecOps and integrating security into CI/CD pipelines.
• Experience with cloud security automation, compliance monitoring, or security tooling is an advantage.
• Strong analytical, problem-solving, troubleshooting, and security risk assessment skills.
• Ability to analyse technical security findings, assess their business impact, and recommend appropriate remediation.
• Strong communication and documentation skills, with the ability to clearly communicate security risks and technical findings to both technical and non-technical stakeholders.