Senior Cloud Security Engineer (AWS)
Hands-on senior security engineer role building and automating AWS-native security: designing multi-account landing zones (Control Tower/Organizations), running IAM/KMS/GuardDuty/Security Hub/WAF, securing EKS/Kubernetes workloads, and writing Terraform and Python automation. Strictly AWS-only; SOC/SIEM or CI/CD-scanner-only backgrounds are excluded.
- Compensation
- Not disclosed
- Location
- Boon Lay, West Region
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- Degree or Diploma in Computer Science, IT, Computer/Electronics Engineering, or related field
- 4+ years hands-on cloud security engineering, AWS architecture hardening, and automated risk remediation
- Deep architect-level AWS experience; AWS-only background (no multi-cloud primary experience)
- Designing AWS landing zones, account segregation (Control Tower / Organizations), and identity isolation models
- Operational experience with AWS-native security services: IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF
- Advanced Terraform for authoring and enforcing security policies as IaC
- Advanced Python for security automation and remediation tooling
- Hands-on EKS / Kubernetes security (pod security, network policies, secrets management), CKS-equivalent knowledge
Nice to have
- AWS Certified Solutions Architect – Professional
- AWS Certified Security – Specialty
- Certified Kubernetes Security Specialist (CKS)
Full description
We are seeking a highly skilled Senior Cloud Security Engineer with deep, architect-level AWS expertise and a strong software engineering background. This is a hands-on, highly technical security engineering role focused on designing, building, and automatingcloud-native security solutions exclusively within AWS environments.
You will be responsible for designing secure AWS landing zones, enforcing container/Kubernetes security, and writing Infrastructure as Code (IaC) to embed security automation.
What We Are Looking For (Ideal CandidateProfile)
-
Strong IaC & Automation Skills: Hands-on proficiency with Terraform for infrastructure deployment and a solid software engineering foundation in Python.
-
AWS Security Architecture Expertise: Proven track record designing landing zones, account segregation strategies, and implementing AWS-native security services (e.g., AWS Control Tower, Organisations, IAM, KMS, GuardDuty, Security Hub, Config, CloudTrail, WAF).
-
Kubernetes Security: Solid hands-on expertise in securing containerised workloads and Kubernetes clusters (EKS), equivalent to Certified Kubernetes Security Specialist (CKS) knowledge.
- Relevant Certifications (A plus, but not a guarantee):
- AWS Certified Solutions Architect – Professional; AWS Certified Security – Speciality
- Certified Kubernetes Security Specialist (CKS)
Who Should NOT Apply (Strict Exclusion Criteria)
To ensure alignment during the interview process, please review these exclusions before applying:
-
Multi-Cloud / Non-AWS Primary Experience: We operate exclusively on AWS. Candidates without deep, hands-on AWS architect-level experience will not be considered.
-
Management & Non-Technical Roles: Candidates whose primary experience is in managing security teams, P&L management, or SLA/vendor governance.
-
SIEM, SecOps, GRC & VAPT: Candidates limited to SOC operations, SIEM monitoring, GRC compliance auditing, or standard VAPT/pen-testing activities.
-
DevOps / CI-CD Scanners Only: Candidates whose cloud security experience is limited to configuring SAST, DAST, or SCA tools inside standard CI/CD pipelines.
Key Responsibilities1. AWS Cloud Security Architecture &Governance
- Design and implement enterprise-grade AWS security architectures, multi-account landing zone structures (Control Tower / Organisations), and identity isolation models.