Cloud Infrastructure Security Engineer

Stack

Responsibilities

• ▹Design and maintain security controls across AWS and GCP infrastructure, networks, compute, storage and platform services
• ▹Review cloud configurations and infrastructure changes for misconfigurations, excessive permissions, exposure and resilience risks
• ▹Manage IAM, privileged access, network segmentation, encryption, key management, secrets and secure connectivity
• ▹Improve cloud security monitoring, logging, alerting, threat detection and incident response
• ▹Own cloud and infrastructure controls for SC TRM and BNM RMiT, including evidence, testing, remediation and audit support
• ▹Automate security checks and infrastructure guardrails using infrastructure-as-code and scripting tools
• ▹Improve vulnerability management, backup, recovery, business continuity and secure operations with engineering teams

Requirements

• ▹Degree in Computer Science, IT, Cybersecurity or a related field, or equivalent experience
• ▹3+ years in cloud, infrastructure, systems or security engineering
• ▹Experience implementing and owning SC TRM and BNM RMiT controls for cloud and technology infrastructure
• ▹Hands-on experience securing AWS and GCP environments and cloud-native architectures
• ▹Strong knowledge of IAM, networking, firewalls, encryption, key management, hardening and cloud security posture management
• ▹Experience with infrastructure as code, automation, vulnerability scanning, logging and incident response
• ▹Strong troubleshooting and communication skills across platform, application and compliance teams

Soft skills

About the company

BJAK started in 2019 and is the leading online insurance platform in Southeast Asia, now expanding into other areas of personal finance such as saving, investing and travel. The team spans over 20 nationalities, working from offices and remotely.