Security Engineer

• Partner closely with engineering teams as a security subject-matter expert, helping incorporate security considerations into planning, architecture, development, and product decisions.
• Develop and maintain automated security controls throughout the software delivery lifecycle, including application, dependency, secrets, and infrastructure security checks.
• Strengthen cloud security operations by monitoring environments for vulnerabilities, misconfigurations, and areas requiring remediation or hardening.
• Regularly evaluate systems, applications, and engineering practices against security policies, regulatory expectations, and established security frameworks.
• Help develop and operate cloud-based threat detection and response capabilities and participate in security incidents when needed.
• Establish clear documentation around security controls, technical decisions, configurations, and operational processes.
• Manage endpoint and device security controls while helping ensure appropriate access and policy enforcement across the organization.
• Work with engineering and business stakeholders to identify risk, determine practical solutions, and improve the organization’s overall security posture without unnecessarily slowing development.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent hands-on experience.
• 8+ years of experience spanning security engineering, Dev Ops, software engineering, or a closely related field.
• Strong experience with modern CI/CD environments, infrastructure automation, and configuration management.
• Proficiency in at least two programming or scripting languages, ideally including Python, Go, JavaScript, or Rust.
• Significant hands-on experience securing cloud environments, including areas such as IAM, networking, containers, encryption, logging, monitoring, and access controls.
• Strong Kubernetes experience, particularly in environments using Git Ops practices.
• Experience designing and implementing automated security controls, secrets management, infrastructure security testing, and policy enforcement.
• Experience with vulnerability assessments and/or application penetration testing.
• Strong Python or Bash scripting capabilities for automation and integrations.
• Experience supporting security audits and external compliance assessments, including preparation, remediation, and evidence gathering.
• Experience with Zero Trust networking and modern remote-access/security platforms.
• Hands-on experience with SIEM platforms and security monitoring.
• Excellent communication and stakeholder-management skills, with the ability to explain technical security risks in practical business terms.
• Someone who can operate with a high level of ownership, discretion, and sound judgment when working with sensitive systems and information.

Jennie Tay