AWS Security Engineer

About the role

An AWS Security Engineer is needed in Singapore to design, implement and maintain security controls across cloud infrastructure and workloads. The role covers assessing cloud security risks, strengthening security architecture, automating security operations and supporting compliance with organisational and project requirements. It works closely with Cloud, DevOps, Application, Engineering and Operations teams to embed security throughout the development and operations lifecycle.

Key responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for AWS environments, including public sector and regulated workloads.
• Design, implement and maintain secure cloud architectures, landing zones, account segregation, guardrails and baseline configurations.
• Harden cloud infrastructure, services, virtual machines, containers and platform components against approved security standards and benchmarks.
• Manage identity and access controls, including least privilege, federation, privileged access, secrets management and encryption key management.
• Configure network security controls such as segmentation, firewalls, web application firewalls, DDoS protection, private connectivity and encryption.
• Set up security monitoring, logging and alerting, perform vulnerability assessments and configuration reviews, and track remediation to closure.
• Automate security hardening, monitoring, compliance checks and remediation via scripts and Infrastructure as Code, and integrate security controls and automated testing into CI/CD pipelines.
• Support container and Kubernetes security, including image scanning, runtime protection and secrets management.
• Review environments for compliance with security policies, cloud governance standards, data residency controls and public sector requirements, and maintain security documentation and remediation records.

Required profile

• Degree or diploma in Computer Science, Computer Engineering, Electronics Engineering, Information Technology or a related discipline.
• Minimum 4 years of experience in cloud security engineering, security assessments, risk analysis and remediation.
• Hands-on experience securing AWS infrastructure and workloads.
• Clear communication skills in English and the ability to explain technical security issues to different stakeholders.

Required skills

• AWS security and governance services: IAM, Organizations, Control Tower, KMS, CloudTrail, AWS Config, GuardDuty, Security Hub, Inspector and WAF.
• Identity and access management, network security, encryption, secrets management and cloud logging.
• Preferred: Terraform or AWS CloudFormation, CI/CD tools such as GitLab, GitHub Actions, Jenkins or Azure DevOps, CSPM/CWPP/CNAPP tools, Amazon EKS, PAM, zero trust, PKI, SIEM/SOAR, SAST/DAST, and certifications such as AWS Certified Security – Specialty, CCSP, CISSP or OSCP.