Security Engineer, Banking (1-year renewable contract)

Dear Applicant,

If you or someone you know isinterested, please send the CV directly to [Confidential Information]

(preferred, as I may overlooksome CVs due to the high volume).

Please note that visasponsorship is not available at this time.

JD

Perform security control validation and effectiveness testing across cloud platforms and services.

Develop, implement, and maintain cloud security controls in alignment with approved security architecture designs.

.

Support the implementation of security-by-design principles across cloud infrastructure and applications.

.

Assess cloud environments against internal security policies, security baselines, and regulatory requirements.

.

Configure and manage cloud-native security services, monitoring capabilities, and security automation tools.

.

Review cloud configurations and identify security weaknesses, misconfigurations, and compliance gaps.

.

Collaborate with Security Architects to translate security requirements into technical controls and operational procedures.

.

Support vulnerability management activities, including remediation tracking and validation of corrective actions.

.

Participate in cloud security risk assessments and recommend risk mitigation measures.

.

Conduct security control reviews for new cloud services, infrastructure deployments, and technology implementations.

.

Develop security standards, procedures, and technical documentation related to cloud security.

.

Support security incident investigations and provide technical expertise during containment and remediation activities.

.

Automate security checks, compliance monitoring, and reporting wherever practical.

.

Monitor emerging cloud security threats, vulnerabilities, and industry best practices, recommending improvements as necessary.

3-7 years of experience in cloud security, cyber security, or infrastructure security roles.

## RESTRICTED ##

.

Strong understanding of cloud security principles and architectures across Google Cloud Platform or Azure.

.

Experience implementing and validating cloud security controls.

.

Knowledge of cloud-native security services, IAM, network security, encryption, logging, and monitoring technologies.

.

Understanding of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.

.

Experience with vulnerability management and security assessment tools.

.

Proficient in developing Infrastructure as Code (IaC) and familiarity with DevSecOps security practices.

.

Strong analytical, problem-solving and troubleshooting skills.

.

Ability to document technical findings and communicate security risks effectively to technical and non-technical stakeholders.