Security Engineer (Banking, 1-year renewable contract)

Dear Applicant, If you or someone you know is interested, please send the CV directly to [email protected] (most preferred, as I may overlook some CVs due to the high volume). Please note that visa sponsorship is not available at this time. Key Responsibilities

• Perform security control validation and effectiveness testing across cloud platforms and services.

• Develop, implement, and maintain cloud security controls in alignment with approved security architecture and organisational security standards.

• Apply security-by-design principles across cloud infrastructure, applications, and technology implementations.

• Assess cloud environments against internal security policies, security baselines, and regulatory requirements, identifying compliance gaps and areas for improvement.

• Configure and manage cloud-native security services, IAM, monitoring capabilities, and security automation tools.

• Review cloud configurations to identify security weaknesses, misconfigurations, vulnerabilities, and compliance gaps, and drive appropriate remediation.

• Collaborate with Security Architects and technology teams to translate security requirements and architectural designs into practical technical controls and operational procedures.

• Support vulnerability management activities, including remediation tracking, risk assessment, and validation of corrective actions.

• Participate in cloud security risk assessments and recommend appropriate risk mitigation measures.

• Conduct security control reviews for new cloud services, infrastructure deployments, applications, and technology implementations.

• Develop and maintain cloud security standards, procedures, guidelines, and technical documentation.

• Support security incident investigations, providing technical expertise during containment, remediation, and post-incident activities.

• Automate security controls, compliance checks, monitoring, and reporting where practical.

• Stay up to date with emerging cloud security threats, vulnerabilities, technologies, and industry best practices, recommending improvements to the organisation's cloud security posture.

Key Requirements

• 3–7 years of experience in Cloud Security, Cybersecurity, Infrastructure Security, or a related security engineering role.

• Strong understanding of cloud security principles, architectures, and security controls across Google Cloud Platform (GCP) and/or Microsoft Azure.

• Hands-on experience implementing, configuring, and validating cloud security controls.

• Strong knowledge of cloud-native security services, IAM, network security, encryption, logging, monitoring, and security operations.

• Good understanding of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.

• Experience with vulnerability management, security assessments, configuration reviews, and security assessment tools.

• Hands-on experience with Infrastructure as Code (IaC) and familiarity with DevSecOps and integrating security into CI/CD pipelines.

• Experience with cloud security automation, compliance monitoring, or security tooling is an advantage.

• Strong analytical, problem-solving, troubleshooting, and security risk assessment skills.

• Ability to analyse technical security findings, assess their business impact, and recommend appropriate remediation.

• Strong communication and documentation skills, with the ability to clearly communicate security risks and technical findings to both technical and non-technical stakeholders.