Cloud Security Engineer

We're Hiring: Cloud Security Engineer – AWS

Singapore | Contract Role

We're seeking a hands-on security engineer with architect-level AWS expertise, strong Terraform and Python skills, and deep Kubernetes security experience.

The environment operates exclusively on AWS. AWS must be your primary cloud specialisation, supported by substantial professional design and implementation experience.

What you'll do:

• Design and implement secure AWS landing zones, multi-account structures, account segregation and security guardrails.

• Build and manage AWS-native security controls using IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector and WAF.

• Assess cloud security risks, harden infrastructure and implement automated remediation.

• Develop reusable Terraform modules and Python-based security tools and automation.

• Secure Kubernetes/EKS workloads through access controls, network policies, secrets management, image scanning and runtime protection.

• Integrate security controls into IaC and CI/CD workflows and operationalise CSPM/CWPP/CNAPP tools where required.

What we're looking for:

Minimum 4 years of hands-on cloud security engineering, assessment and remediation experience.

Proven AWS architecture capability, including personally designing and implementing landing zones and cloud security controls.

Strong Terraform development skills.

Solid Python software engineering background beyond basic scripting.

Strong Kubernetes security expertise equivalent to CKS level.

Degree or Diploma in Computer Science, IT, Engineering or a related technical discipline.

AWS GCC, public-sector or regulated-environment experience is an advantage, alongside familiarity with CIS Benchmarks, NIST, ISO 27001, SOC 2 and PCI DSS.

AWS Solutions Architect – Professional, AWS Security – Specialty and CKS certifications are advantageous, but practical experience is essential.

Please note: This is a technical AWS security engineering role. Experience limited to SOC/SIEM operations, SecOps, GRC, VAPT, security team management, P&L/SLA ownership or SAST/DAST pipeline scanning alone will not meet the requirements.

Please highlight your hands-on AWS landing zone, Terraform, Python and Kubernetes security projects in your application.