Senior Cloud Security Engineer

Executive Monroe Consulting Group is recruiting on behalf of a BSP-licensed Electronic Money Issuer and Registered Operator of Payment Systems, and a trusted leader in the fintech space.

This role is based in Makati City and follows a Hybrid setup with on-site reporting twice a week.

The Senior Cloud Security Engineer will be responsible for designing, implementing, and managing robust security solutions for our cloud infrastructure. This role requires a deep understanding of cloud security best practices, risk management, and compliance frameworks. The Senior Cloud Security Engineer will work closely with cross-functional teams to ensure the security of our cloud environments and protect sensitive data. The role involves leading and guiding a team, strong problem-solving skills, attention to detail, and effective communication are essential for collaborating across teams and implementing robust security practices

Key Job Responsibilities :

• People Management:
  • Leading the team, creating action plans for cloud security deliverables, and evaluating team performance for continuous improvement.
  • Provide guidance and mentorship to junior security engineers and team members.
• Security Posture Management:
  • Lead the design and implementation of infrastructure security hardening for cloud environments (AWS, Azure, GCP). Implement new cloud features and services as required.
  • Ensure the overall security posture of cloud environments is maintained and continuously improved.
  • Ensure all cloud resources are well-secured.
  • Develop and enforce security policies, standards, and procedures for cloud services.
  • Conduct a cloud user access review.
• Compliance and Governance:
  • Ensure compliance with relevant regulatory requirements and industry standards (e.g., GDPR, HIPAA, PCI-DSS).
  • Maintain up-to-date documentation of security policies, procedures, and compliance status.
• Risk Management:
  • Identify, assess, and prioritize security risks associated with cloud services and applications.
  • Develop and implement risk mitigation strategies and ensure they are effectively communicated to stakeholders.
• Collaboration and Learning:
  • Collaborate with cross-functional teams, including DevOps, Engineering, and Compliance, to ensure security is integrated into all aspects of cloud operations.
  • Communicate security risks and recommendations to senior management and other stakeholders clearly and effectively.
  • Evaluate and implement security tools and technologies to enhance cloud security posture.
  • Stay current with emerging cloud security trends, threats, and technologies.
• Incident Management:
  • Provide Level 3 technical support and resolve security issues through root cause analysis.
  • Participating in global follow-the-sun support, including after-hours on-call duties.
  • Analyze and remediate security incidents, breaches, or threats.
• Documentation:
  • Provide clear task breakdowns and time estimates.
  • Document configurations, processes, and incident resolutions.
• Adhere to quality and compliance standards as part of our Information Security Management System. This includes following documented processes, participating in continuous improvement, and maintaining accurate records. Each team member is responsible for supporting a safe, efficient, and customer-focused work environment.
• Accountable for maintaining and enhancing the security posture of cloud environments, ensuring compliance with regulatory requirements and industry standards.
• Lead incident response efforts, manage security risks, and design secure cloud architectures while collaborating with cross functional teams to integrate security into all operations.

Key Job Qualifications :

• Bachelor's degree in Computer Science, Information Technology, or related fields.
• At least 2 years of experience in cloud infrastructure and security, preferably in fintech or financial institutions.
• 2-3 years of experience in the following skills/tools:
  • Identity and Access Management (OKTA, AWS IAM, SSO, MFA, VPN)
  • Cloud Management (AWS Security Hub, AWS S3, AWS Route53, AWS CloudWatch, Digital Ocean, GCP, Azure)
  • SSL/TLS (AWS ACM, OpenSSL, CSR, AWS ALB)
  • SIEM, FIM, and IPS/IDS (AWS CloudTrail, Trend Micro Vision One, CrowdStrike Falcon, Splunk, AWS Guard Duty)
  • Scripting (AWS CLI, Python, Bash, PowerShell)
  • Linux and Windows Administration
  • Agile Methodology (Scrum, JIRA, Confluence, GitLab Issue)
  • Key Management (AWS Secrets, AWS KMS, Hashicorp Vault)