Lava Protocols Sdn. Bhd. Hiring! Full Time Cloud Security Engineer in Federal Territory - Ricebowl

We are looking for an experienced Cloud Security Engineer to support enterprise AWS and Microsoft Azure cloud environments as part of a dedicated Cloud Managed Services team. The role focuses on cloud security operations, identity management, threat detection, vulnerability management, compliance, and incident response while ensuring secure and compliant cloud operations.

Responsibilities

• Cloud Security Operations
• Monitor and secure enterprise AWS and Azure cloud environments.
• Implement and maintain cloud security controls, policies, and governance.
• Support identity and access management (IAM) activities.
• Perform security monitoring, incident analysis, and threat detection.
• Identity & Access Management
• Manage Microsoft Entra ID (Azure AD), IAM, RBAC, Conditional Access, MFA, and Privileged Identity Management (PIM).
• Review and manage privileged access and user lifecycle activities.
• Security Monitoring
• Monitor security alerts using Microsoft Sentinel, Defender, Security Center, CloudWatch, GuardDuty, or similar tools.
• Investigate security incidents and coordinate remediation activities.
• Perform vulnerability assessments and support patch remediation.
• Compliance & Governance
• Support compliance initiatives aligned with ISO 27001, NIST, PCI DSS, and ISMS requirements.
• Participate in security audits and compliance reporting.
• Assist in annual Disaster Recovery and Cybersecurity exercises.
• Incident Management
• Respond to security incidents within agreed SLAs.
• Perform root cause analysis and recommend preventive measures.
• Participate in standby support for critical incidents.
• Documentation
• Maintain SOPs, runbooks, security documentation, and operational reports.

Qualifications

• Cloud Platforms
• Microsoft Azure
• AWS
• Cloud Security
• Microsoft Sentinel
• Microsoft Defender
• Azure Security Center
• AWS Security Services
• IAM
• RBAC
• Azure Policies
• Conditional Access
• MFA
• PIM
• Monitoring
• Azure Monitor
• CloudWatch
• Log Analytics
• Compliance
• ISO 27001
• NIST
• PCI DSS
• ISMS
• ITSM
• ServiceNow
• Preferred Certifications
• AZ-500
• SC-200
• SC-300
• AWS Security Specialty
• CISSP/CISM (Preferred)