Agensi Pekerjaan Synopsis Sdn Bnd Hiring! Full Time Senior Cloud Security - DevSecOps Specialist in Federal Territory - Ricebowl

Responsibilities

• You must manage end-to-end vulnerability management across AWS and Azure environments.
• You are expected to perform risk-based prioritisation and coordinate remediation with Cloud, DevOps, and application teams.
• You must define, track, and report remediation SLAs, exceptions, and risk treatment plans.
• You are expected to integrate security controls into CI/CD pipelines, including SAST, DAST, SCA, secrets scanning, container, and IaC scanning.
• You must support software supply chain security, including SBOMs, provenance, code signing, and open-source governance.
• You are expected to ensure alignment with internal security policies, standards, and regulatory requirements.
• You must conduct cloud penetration testing and red teaming across AWS, Azure, and GCP, including cloud misconfiguration exploitation.
• You are expected to develop cloud-specific offensive testing methodologies and maintain relevant security toolsets.
• You must support secure IAM configuration processes and identity automation workflows.
• You are expected to conduct post-remediation scanning and penetration testing to validate remediation effectiveness.
• You must produce dashboards and metrics on cloud vulnerability risk and DevSecOps maturity.
• You are expected to mentor junior security professionals and provide technical guidance to cross-functional teams.

Job Requirement

• Bachelor's degree in Business, Computer Science, Information Security, Cybersecurity, or a related technical field, or equivalent.
• Minimum 5 years of experience in penetration testing, with at least 2–3 years focused on cloud platforms such as AWS, Azure, or GCP.
• Proven experience performing penetration testing in cloud infrastructure, cloud misconfiguration exploitation, and offensive tool development.
• Experience in regulated environments such as banking, finance, or telecommunications is highly advantageous.
• Hands-on experience with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, or CircleCI.
• In-depth knowledge of AWS, Azure, and GCP, including IAM, cloud networking, compute, serverless, containers/Kubernetes, storage, and logging.
• Experience with offensive security tools such as Pacu, ScoutSuite, Prowler, Burp Suite, Nmap, and custom scripting using Python, Bash, or PowerShell.
• Experience with IaC and CI/CD tooling such as Terraform, CloudFormation, Jenkins, and GitLab CI.
• Strong understanding of MITRE ATT&CK for Cloud, adversary simulation, and attacker TTPs.
• Certifications such as OSCP, OSEP, GCPN, GWAPT, or CREST equivalent are advantageous.
• Cloud security certifications such as AWS Certified Security Specialty, Microsoft Azure Security Engineer Associate, Google Professional Cloud Security Engineer, Certified DevSecOps Professional (CDP), Certified Kubernetes Security Specialist (CKS), or GIAC Cloud Security Automation (GCSA) are advantageous.

Pay: RM11,000.00 - RM11,500.00 per hour

Work Location: In person