Cloud Infrastructure Security Engineer

About the role

The Cloud Infrastructure Security Engineer will protect cloud environments, networks, and core infrastructure across AWS and GCP. This role focuses on strengthening configuration, access controls, monitoring, and technology risk management to ensure secure and resilient operations.

Responsibilities

• Design and maintain security controls across AWS and GCP infrastructure, networks, compute, storage, and platform services.
• Review cloud configurations and infrastructure changes for misconfigurations, excessive permissions, exposure, and resilience risks.
• Manage IAM, privileged access, network segmentation, encryption, key management, secrets, and secure connectivity.
• Improve cloud security monitoring, logging, alerting, threat detection, and incident response.
• Own cloud and infrastructure controls for SC TRM and BNM RMiT, including evidence, testing, remediation, and audit support.
• Automate security checks and infrastructure guardrails using infrastructure-as-code and scripting tools.
• Improve vulnerability management, backup, recovery, business continuity, and secure operations with engineering teams.

Required skills

• AWS
• GCP
• IAM
• Network security
• Encryption
• Infrastructure as Code
• Vulnerability management
• Incident response
• Cloud security

Qualifications

• Degree in Computer Science, IT, Cybersecurity, or related field
• Equivalent practical experience

About the Company

BJAK is a leading insurance platform in Southeast Asia that aims to help people plan, save, and grow their money. Founded in 2019, the company provides mobile-first financial applications and is expanding its services to include spending, investing, and more.