AWS Security Engineer

Location: Singapore

What you will do

• Design and maintain secure AWS architectures, landing zones, account segregation, guardrails, and baseline configurations.
• Assess cloud security risks, review configurations, identify vulnerabilities, and manage remediation through closure.
• Implement identity and access controls, network security, encryption, secrets management, logging, monitoring, and alerting.
• Automate security hardening, compliance checks, monitoring, and remediation using scripts and Infrastructure as Code.
• Integrate security controls and automated testing into CI/CD pipelines and support container and Kubernetes security.
• Collaborate with Cloud, DevOps, Application, Engineering, Operations, and stakeholder teams on practical security solutions.

Requirements

• Minimum 4 years of relevant experience in cloud security engineering, security assessments, risk analysis, and remediation.
• Degree or diploma in Computer Science, Computer Engineering, Electronics Engineering, Information Technology, or a related discipline.
• Hands-on experience securing AWS infrastructure and workloads, including IAM, Organizations, Control Tower, KMS, CloudTrail, AWS Config, GuardDuty, Security Hub, Inspector, and WAF.
• Practical knowledge of identity and access management, network security, encryption, secrets management, cloud logging, and vulnerability investigation.
• Strong analytical and problem-solving skills, independence, and the ability to manage competing priorities.
• Clear communication skills in English are required.

Nice to have

• Experience with Singapore Government Commercial Cloud, public sector, or regulated cloud environments.
• Experience with Terraform, AWS CloudFormation, CI/CD tools, Agile delivery, CSPM, CWPP, or CNAPP platforms.
• Experience with Amazon EKS, container security, Kubernetes security, PAM, zero trust, PKI, SIEM/SOAR, and incident response.
• Familiarity with SAST, DAST, software composition analysis, secrets scanning, CIS Benchmarks, NIST, ISO 27001, SOC 2, or PCI DSS.
• Relevant AWS, cloud security, security architecture, or security testing certifications.

Culture & Benefits

• Work spans cloud architecture, engineering, DevSecOps, governance, and operational security.
• Collaboration with technical teams and stakeholders is central to the role.
• Projects may include public sector and regulated workloads.