Cloud Security Engineer

As a Cloud Security Engineer
, you will be responsible for Cloud Security (as part of Cyber Security) across both the banking arm and securities business under a dual-hat arrangement. You will act and make decisions on behalf of both entities, ensuring comprehensive risk controls, compliance, and operational resilience across multi-cloud environments.

• Monitor and proactively manage Cloud Security toolsets including CSPM (Cloud Guard, Wiz, MS Defender for Cloud) and CWPP (Cloud Guard, Wiz, Crowd Strike Falcon).
• Oversee Kubernetes security controls for workloads in AKS, OKE, EKS, and on-prem environments.
• Review and assess enterprise cloud architectures for security gaps and recommend mitigations.
• Investigate and track cloud security alerts using Service Now workflows.

• Ensure NIST, ISO
  27002, and CIS-aligned risk controls are covered.
• Develop, improve, and enforce cloud security standards, policies, and procedures.
• Conduct Cyber Security reviews for on-prem, cloud, and third‑party systems, including firewall rules, architecture, and network designs.
• Support governance, risk, and compliance activities, including operational risk reporting and audit liaison.
• Collaborate with IT teams to highlight, manage, and mitigate Cyber Security alerts, threats, and vulnerabilities.
• Liaise with Technology and Business teams to ensure systems meet security standards or agree on mitigations.
• Provide operational insights to security engineering and architecture teams.
• Support Cyber Security incidents, penetration testing, and remedial actions.
• Contribute to continuous improvement of security controls and detection rules.
• Maintain up-to-date knowledge of laws, regulations, and best practices relating to Cyber Security.

• You have 8-10 years of experience in Cloud, Information, or Cyber Security.
• You have experience implementing security solutions that enable business activity.
• You have been actively involved in audits and managed audit relationships.

• You have strong knowledge of frameworks and standards such as ISO
  27001, NIST, CIS, GDPR.
• You are proficient in cloud security tools (CSPM, CWPP) and multi-cloud environments (Azure, OCI, AWS).
• You are experienced with Kubernetes security, endpoint, network, and web access monitoring systems.
• You hold certifications such as CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, or CEH (preferred).

• You demonstrate excellent communication and interpersonal skills.
• You operate with urgency, accountability, and sound judgement.
• You are structured, logical, and proactive in your approach.
• You are comfortable taking ownership of work streams and delivering difficult messages when needed.
• You are passionate about Cyber Security and proactive in identifying and mitigating risks.

---

Thakral One is a consulting and technology services company headquartered in Singapore, with a pan-Asian presence. We focus primarily around technology-driven consulting, adoption of value-added bespoke solutions, enabling enhanced decision support through data analytics, and embracing possibilities in the cloud. We are heavily inclined towards building capabilities collaboratively with clients and believe strongly in improving grounded and practical outcomes.

This approach is possible through our partnership with leading global technology providers and internal R&D teams. Our clients come from Financial Services, Banking, Telco, Government, Healthcare, and Consumer-oriented organisations.