{"id":2933097,"url":"https://alion.io/job/teamleasedigital-senior-cloud-security-engineer-aws","title":"Senior Cloud Security Engineer (AWS)","company":{"id":451607,"name":"Teamleasedigital","domain":"teamleasedigital.global","url":"https://alion.io/company/teamleasedigital","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":6000,"max":9000,"currency":"SGD","period":"month","gross":true,"usd_annual":84384},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-10-20T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-20T00:00:00Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"We are seeking a highly skilled Senior Cloud Security Engineer with deep, architect-level AWS expertise and a strong software engineering background. This is a hands-on, highly technical security engineering role focused on designing, building, and automatingcloud-native security solutions exclusively within AWS environments.\nYou will be responsible for designing secure AWS landing zones, enforcing container/Kubernetes security, and writing Infrastructure as Code (IaC) to embed security automation.\nWhat We Are Looking For (Ideal CandidateProfile)\nStrong IaC & Automation Skills: Hands-on proficiency with Terraform for infrastructure deployment and a solid software engineering foundation in Python.\nAWS Security Architecture Expertise: Proven track record designing landing zones, account segregation strategies, and implementing AWS-native security services (e.g., AWS Control Tower, Organisations, IAM, KMS, GuardDuty, Security Hub, Config, CloudTrail, WAF).\nKubernetes Security: Solid hands-on expertise in securing containerised workloads and Kubernetes clusters (EKS), equivalent to Certified Kubernetes Security Specialist (CKS) knowledge.\nRelevant Certifications (A plus, but not a guarantee):\nAWS Certified Solutions Architect – Professional; AWS Certified Security – Speciality\nCertified Kubernetes Security Specialist (CKS)\nWho Should NOT Apply (Strict Exclusion Criteria)\nTo ensure alignment during the interview process, please review these exclusions before applying:\nMulti-Cloud / Non-AWS Primary Experience: We operate exclusively on AWS. Candidates without deep, hands-on AWS architect-level experience will not be considered.\nManagement & Non-Technical Roles: Candidates whose primary experience is in managing security teams, P&L management, or SLA/vendor governance.\nSIEM, SecOps, GRC & VAPT: Candidates limited to SOC operations, SIEM monitoring, GRC compliance auditing, or standard VAPT/pen-testing activities.\nDevOps / CI-CD Scanners Only: Candidates whose cloud security experience is limited to configuring SAST, DAST, or SCA tools inside standard CI/CD pipelines.\nKey Responsibilities\n1. AWS Cloud Security Architecture &Governance\nDesign and implement enterprise-grade AWS security architectures, multi-account landing zone structures (Control Tower / Organisations), and identity isolation models.\nOperationalise native AWS security services, including IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, and AWS WAF.\nEnforce Zero Trust patterns, strict IAM policies, and robust data encryption at rest and in transit across all AWS services.\n2. Infrastructure as Code (IaC) &Security Engineering\nAuthor, maintain, and enforce security policies across clean, modular Terraform templates.\nBuild custom security automation, automated remediation scripts, and tooling using Python.\nSecure Amazon Elastic Kubernetes Service (EKS) infrastructure and container runtime environments, ensuring strict pod security, network policies, and secrets management.\n3. Vulnerability Mitigation &Remediation\nProactively analyze, prioritize, and automate the remediation of cloud security risks and misconfigurations across AWS landing zones.\nDeploy and manage Cloud Native Application Protection Platforms (CNAPP / CSPM / CWPP) to enforce continuous cloud posture compliance.\nRequirements & Qualifications\nMinimum Requirements\nEducation: Degree or Diploma in Computer Science, Information Technology, Computer/Electronics Engineering, or a related technical discipline\nExperience: Minimum of 4+ years of hands-on experience in cloud security engineering, AWS architecture hardening, and automated risk remediation.\nTechnical Stack:\nCloud: Deep AWS experience (Architect-level knowledge).\nIaC & Code: Advanced Terraform and Python.\nContainers: Hands-on EKS / Kubernetes security.\n\nSkills\nTerraform, Computer Engineering, Cloud Governance, Template Creation, IAM, Architect, Data Encryption, Infrastructure as Code (IaC), Computer Science, AWS SDK, Risk Mitigation, Google Cloud, Education, System Security Policies, Security Architecture Design, Technical Infrastructure","description_format":"text","description_chars":4100,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Recruiting & Staffing"],"lifecycle":[{"event":"open","at":"2026-10-20T14:28:45Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":7,"expected_fill_days":28,"reasons":["seen:7","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":84384,"is_top_pay":false},"html_url":"https://alion.io/job/teamleasedigital-senior-cloud-security-engineer-aws","json_url":"https://alion.io/job/teamleasedigital-senior-cloud-security-engineer-aws.json","meta":{"generated_at":"2026-10-27T20:03:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10962,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":451607},"rest":"https://alion.io/mcp/rest/get_company?id=451607"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fteamleasedigital-senior-cloud-security-engineer-aws"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fteamleasedigital-senior-cloud-security-engineer-aws"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fteamleasedigital-senior-cloud-security-engineer-aws"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/teamleasedigital-senior-cloud-security-engineer-aws\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fteamleasedigital-senior-cloud-security-engineer-aws"}]}