Security Engineer (1-year renewable contract)

Key Responsibilities • Perform security control validation and effectiveness testing across cloud platforms and services. • Develop, implement, and maintain cloud security controls in alignment with approved security architecture and organisational security standards. • Apply security-by-design principles across cloud infrastructure, applications, and technology implementations. • Assess cloud environments against internal security policies, security baselines, and regulatory requirements, identifying compliance gaps and areas for improvement. • Configure and manage cloud-native security services, IAM, monitoring capabilities, and security automation tools. • Review cloud configurations to identify security weaknesses, misconfigurations, vulnerabilities, and compliance gaps, and drive appropriate remediation. • Collaborate with Security Architects and technology teams to translate security requirements and architectural designs into practical technical controls and operational procedures. • Support vulnerability management activities, including remediation tracking, risk assessment, and validation of corrective actions. • Participate in cloud security risk assessments and recommend appropriate risk mitigation measures. • Conduct security control reviews for new cloud services, infrastructure deployments, applications, and technology implementations. • Develop and maintain cloud security standards, procedures, guidelines, and technical documentation. • Support security incident investigations, providing technical expertise during containment, remediation, and post-incident activities. • Automate security controls, compliance checks, monitoring, and reporting where practical. • Stay up to date with emerging cloud security threats, vulnerabilities, technologies, and industry best practices, recommending improvements to the organisation's cloud security posture. Key Requirements • Min 3 years of experience in Cloud Security, Cybersecurity, Infrastructure Security, or a related security engineering role. • Strong understanding of cloud security principles, architectures, and security controls across Google Cloud Platform (GCP) and/or Microsoft Azure. • Hands-on experience implementing, configuring, and validating cloud security controls. • Strong knowledge of cloud-native security services, IAM, network security, encryption, logging, monitoring, and security operations. • Good understanding of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM. • Experience with vulnerability management, security assessments, configuration reviews, and security assessment tools. • Hands-on experience with Infrastructure as Code (IaC) and familiarity with DevSecOps and integrating security into CI/CD pipelines. • Experience with cloud security automation, compliance monitoring, or security tooling is an advantage. • Strong analytical, problem-solving, troubleshooting, and security risk assessment skills. • Ability to analyse technical security findings, assess their business impact, and recommend appropriate remediation. • Strong communication and documentation skills, with the ability to clearly communicate security risks and technical findings to both technical and non-technical stakeholders.