Cloud Security Engineer

NCS is a leading AI Tech Services company. With a 15,000-strong team across the Asia Pacific, NCS scales its platforms and capabilities to provide clients with greater agility and AI expertise across a range of Industries. Embracing a strong ecosystem of global partners, NCS transforms technology services delivery combining AI with digital resilience to drive real business impact. NCS is a subsidiary of the Singtel Group.

What will you do?

Cloud Infrastructure & Security Operations

· Deploy, configure, and maintain cloud native security services across AWS and Azure (e.g., AWS Security Hub, GuardDuty, Inspector, Macie; Azure Defender for Cloud, Microsoft Sentinel)

· Monitor cloud environments for misconfigurations, vulnerabilities, and anomalous activity; triage and remediate L2-level findings

· Enforce least-privilege IAM policies across AWS (IAM roles, SCPs) and Azure (RBAC, PIM, Conditional Access)

Cloud Native Cyber Tool Management

· Operate and tune CSPM (Cloud Security Posture Management) tools such as Prisma Cloud, Wiz, or Defender for Cloud

· Support SIEM integration pipelines — ingesting cloud logs (CloudTrail, Azure Monitor, VPC Flow Logs) into Sentinel or Splunk and writing detection rules/KQL queries

Incident Response & Compliance Support

· Participate in cloud security incident response — investigation, containment, and post-incident documentation

· Support audit and compliance activities against frameworks including CIS Benchmarks (AWS & Azure) and IM8

· Run regular vulnerability assessments and coordinate remediation tracking with engineering teams

The ideal candidate should possess:

· 3–5years of experience in cloud engineering or cloud security roles

· Hands-on production experience with both AWS and Azure (not just one)

· Demonstrated experience operating cloud native security tools in a live environment

· Familiar with Singapore Government Cloud (GCC/GCC+)

· AWS:EC2, VPC, IAM, S3, CloudTrail, GuardDuty, Security Hub, KMS, Secrets Manager

· Azure: VNet/NSG/UDR, Defender for Cloud, Microsoft Sentinel, Key Vault, IAM, RBAC

· Scripting: KQL for Sentinel queries, IOC Hash Scanning

· Networking: Solid understanding of cloud networking concepts — routing, DNS, TLS, zero-trust architecture – Optional

· Crowdstrike– Onboarding of VM

· AWS Certified Security – Specialty or AWS Certified Solutions Architect – Associate

· Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Azure Administrator (AZ-104)

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.