AWS Cloud Security Engineer

About the role

The AWS Cloud Security Engineer leads and manages the security posture of the organization’s cloud environments. This role oversees cloud security architecture, governance, compliance, incident response, and operations to ensure secure design, implementation, and ongoing management of cloud workloads.

Key responsibilities

• Establish, maintain, and enforce cloud security policies, standards, and governance frameworks.
• Review and approve secure‑by‑design AWS solution designs, including threat modeling and compliance with reference architectures.
• Own and govern IAM strategy, enforcing least‑privilege, strong authentication, and periodic access reviews.
• Oversee continuous monitoring, vulnerability management, and remediation of misconfigurations.
• Ensure regulatory and internal compliance (SOC 2, GDPR, MAS TRM, PDPA) and manage audits and risk assessments.
• Lead cloud security incident response, forensics, containment, recovery and root‑cause analysis.
• Collaborate with Cloud, DevOps, Network, and Cybersecurity teams to embed security‑by‑design and mentor staff.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Engineering or related field (Master’s a plus).
• 5–10 years of cybersecurity experience, with at least 3 years focused on AWS cloud security and architecture.
• Proven ability to implement IAM governance, encryption controls, network security, and secure cloud design principles.

Required skills

• AWS security services: IAM, Security Hub, GuardDuty, CloudTrail, Config, Macie, KMS, WAF, Shield.
• Infrastructure‑as‑Code tools: Terraform, CloudFormation.
• Experience with cloud compliance frameworks (ISO 27001, SOC 2, CIS, MAS TRM, NIST).