Cloud Engineer - Cloud Security & Operations

About the role

NCS, an AI tech services company and subsidiary of the Singtel Group, is hiring a Cloud Engineer in Singapore. The role covers cloud infrastructure and security operations on AWS and Azure, including security tool management, SIEM integration, incident response support and compliance work.

Key responsibilities

• Deploy, configure and maintain cloud-native security services on AWS (Security Hub, GuardDuty, Inspector, Macie) and Azure (Defender for Cloud, Microsoft Sentinel)
• Monitor cloud environments for misconfigurations, vulnerabilities and anomalous activity, and triage and remediate Level 2 findings
• Enforce least-privilege IAM policies on AWS (roles, SCPs) and Azure (RBAC, PIM, Conditional Access)
• Operate and tune CSPM tools such as Prisma Cloud, Wiz or Defender for Cloud
• Support SIEM pipelines that ingest cloud logs (CloudTrail, Azure Monitor, VPC Flow Logs) into Sentinel or Splunk and write detection rules and KQL queries
• Take part in cloud security incident response, including investigation, containment and post-incident documentation
• Support audits and compliance against CIS Benchmarks (AWS and Azure) and IM8, run regular vulnerability assessments and track remediation with engineering teams

Required profile

• 3-5 years of experience in cloud engineering or cloud security roles
• Hands-on production experience with both AWS and Azure
• Demonstrated experience running cloud-native security tools in a live environment
• Familiarity with Singapore Government Cloud (GCC/GCC+)

Required skills

• AWS: EC2, VPC, IAM, S3, CloudTrail, GuardDuty, Security Hub, KMS, Secrets Manager
• Azure: VNet, NSG, UDR, Defender for Cloud, Microsoft Sentinel, Key Vault, IAM, RBAC
• Scripting: KQL for Sentinel queries and IOC hash scanning
• Networking: routing, DNS, TLS, zero-trust architecture (optional)
• CrowdStrike and AWS Certified Security Specialty or AWS Certified Solutions Architect - Associate preferred
• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Azure Administrator (AZ-104) preferred