Talent.com
Tawaran kerja ini tidak tersedia di negara anda.
Cloud Security Engineer

Cloud Security Engineer

BTI Executive SearchKuala Lumpur, Kuala Lumpur, Malaysia
15 jam yang lalu
Penerangan pekerjaan

Responsibilities

  • Security Architecture & Implementation : Design and implement secure, scalable, and resilient cloud infrastructure architectures across AWS / GCP / Azure
  • Identity & Access Management (IAM) : Enforce the principle of least privilege by implementing and managing robust IAM policies, Role-Based Access Control (RBAC), and Multi-Factor Authentication (MFA).
  • Network Security : Configure and manage cloud-native firewalls, Web Application Firewalls (WAF), DDoS protection services, and VPNs to secure network boundaries and segment internal environments.
  • Data Protection : Implement and manage data security controls, including encryption (at-rest and in-transit), Data Loss Prevention (DLP) strategies, and secure key management using HSMs or cloud KMS.
  • Incident Response & Monitoring : Perform security monitoring, log analysis, and forensic investigations using SIEM and other tools. Lead and coordinate response activities for cloud security incidents.
  • API Security : Secure our API ecosystem through the implementation of OAuth2, JWT validation, rate limiting, and by promoting secure API design principles.
  • Policy & Compliance : Develop, maintain, and enforce cloud security policies, standards, and procedures. Own and manage compliance with frameworks such as PCI-DSS, ISO 27001, and RMiT.
  • Threat Intelligence & Strategy : Stay current with the latest cloud security threats and vulnerabilities, and integrate this knowledge into our security strategy and tooling decisions.

Requirements

  • Hands-on experience in cloud security engineering.
  • Proven multi-cloud expertise with at major public cloud providers
  • Demonstrable, hands-on experience with core security tools : CSPM, WAF, SIEM, DLP, and IAM .
  • Deep, practical knowledge of IAM concepts : RBAC, least privilege, MFA, and identity federation .
  • Strong understanding of networking fundamentals : firewalls, VPNs, VPC / VNet segmentation, and DNS .
  • Practical experience implementing or maintaining at least one major compliance framework : ISO 27001, PCI-DSS, or NIST .
  • Seniority level

  • Mid-Senior level
  • Employment type

  • Full-time
  • Job function

  • Information Technology
  • Industries

  • Human Resources Services
  • We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

    #J-18808-Ljbffr

    Buat amaran kerja untuk carian ini

    Cloud Engineer • Kuala Lumpur, Kuala Lumpur, Malaysia