{"id":3793677,"url":"https://alion.io/job/zus-coffee-infosecops-cloud-security-engineer","title":"InfoSecOps/ Cloud Security Engineer","company":{"id":3012167,"name":"ZUS Coffee","domain":"zuscoffee.com","url":"https://alion.io/company/zuscoffee","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-11-05T07:49:27Z","employer_posted_date":null,"last_verified_at":"2026-11-05T07:49:27Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Position Description\n\nWe are hiring a Cloud Security Engineer to execute and improve the security posture of our cloud and platform environments. This role is hands-on and engineering-driven, focused on reducing real security risk through practical controls, automation, and collaboration. You will work closely with Platform/Infrastructure, DevOps, Engineering, and IT Ops teams to embed security into day-to-day operations. This role reports to the Security Manager and plays a critical part in strengthening IAM, cloud configurations, pipelines, and detection capabilities as the company scales.\n\nCloud security execution\n\nSecure and continuously improve AWS environments, including IAM, networking, logging, and baseline configurations.\n\nIdentify, prioritize, and remediate cloud misconfigurations and insecure patterns.\n\nPartner with Infrastructure teams to implement secure-by-default cloud architectures.\n\nIdentity and access management (IAM)\n\nReview and reduce over-permissioned access across cloud and systems.\n\nImplement and maintain least-privilege IAM role models.\n\nSupport joiner/mover/leaver processes in collaboration with IT Ops.\n\nAssist with privileged access controls and access review processes.\n\nCI/CD and platform security\n\nWork with DevOps teams to secure CI/CD pipelines.\n\nImplement controls to prevent secrets leakage and insecure deployments.\n\nImprove secrets management, key rotation, and environment separation.\n\nSupport infrastructure-as-code security practices and reviews.\n\nMonitoring, detection, and response support\n\nImprove security logging, alerting, and visibility across cloud environments.\n\nSupport detection of abnormal or risky behavior.\n\nAssist the Security Manager during incident investigations and root-cause analysis.\n\nEnsure security findings lead to concrete remediation actions.\n\nSecurity standards implementation\n\nTranslate security policies and standards into technical controls and guardrails.\n\nEnsure security requirements are enforced through systems and automation rather than manual checks.\n\nHelp teams adopt secure patterns without slowing delivery.\n\nCollaboration and enablement\n\nWork directly with Infrastructure and Engineering teams on remediation and improvements.\n\nExplain security risks and solutions clearly to engineers.\n\nAvoid “security vs engineering” dynamics by focusing on outcomes and practicality.\n\nProvide input and feedback to help shape future security standards and tooling.\n\nRequirements\n\nQualification and Experience\n\n4 to 7 years of experience in cloud, infrastructure, DevOps, or security engineering roles.\n\nStrong hands-on experience with AWS.\n\nSolid understanding of:- IAM and role-based access control\n- Cloud networking fundamentals\n- Logging, monitoring, and alerting-Secrets management.\n\nExperience working with CI/CD pipelines and DevOps tooling.\n\nPractical problem-solving mindset with a bias toward automation.\n\nExperience with infrastructure-as-code (Terraform, CloudFormation, etc.).\n\nFamiliarity with CSPM or cloud security tooling\n\nExperience supporting incident response or security investigations.\n\nExposure to application or API security concepts.\n\nExperience in fast-moving or scaling environments. \n\nSkills\nSecurity Engineering, DevOps, Identity And Access Management, Cloud Security","description_format":"text","description_chars":3281,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Catering & Food Services"],"lifecycle":[{"event":"open","at":"2026-11-05T08:05:15Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":26,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/zus-coffee-infosecops-cloud-security-engineer","json_url":"https://alion.io/job/zus-coffee-infosecops-cloud-security-engineer.json","meta":{"generated_at":"2026-11-07T22:50:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37729,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3012167},"rest":"https://alion.io/mcp/rest/get_company?id=3012167"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzus-coffee-infosecops-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzus-coffee-infosecops-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzus-coffee-infosecops-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zus-coffee-infosecops-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzus-coffee-infosecops-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3793677}},{"tool":"search_jobs","arguments":{"company":"zuscoffee.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3793677},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}