Cloud Security Engineer

About the role

Join the Pioneer Crypto Brand in the Philippines!

Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.

Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

Responsibilities: - Responsible for the overall planning, construction, and continuous optimization of AWS cloud environment security architecture, covering account systems, IAM, VPC, compute, storage, container, and data security.

- Responsible for the design, configuration, and operation of WAF and DDoS protection systems, including AWS WAF, AWS Shield, CloudFront, Route 53, and third-party security products.

- Design and implement network isolation strategies, including multi-account, multi-VPC, production and non-production environment isolation, subnet segmentation, east-west access control, egress control, and zero-trust access.

- Responsible for the configuration and auditing of Security Group, NACL, Transit Gateway, PrivateLink, VPN, Direct Connect, and other network security components.

- Proficient in using AI technologies and tools to carry out cloud security operations, achieving cloud resource risk identification, security monitoring, anomalous behavior analysis, intelligent alert triage, and incident response automation, improving the efficiency of security threat detection and handling.

- Build cloud security monitoring and response capabilities, discovering and handling security risks based on CloudTrail, GuardDuty, Security Hub, Config, VPC Flow Logs, and other tools.

- Drive the implementation of cloud resource configuration baselines, vulnerability management, key management, log auditing, data encryption, and disaster recovery strategies.

- Participate in cloud security incident response, attack tracing, risk assessment, and remediation tracking.

- Drive infrastructure as code and security automation, integrating security checks into Terraform, CloudFormation, CI/CD, and other processes.

- Collaborate with R&D, operations, network, and AI teams to provide security architecture review and launch support for business systems.

Requirements: - Bachelor's degree or above, majors in computer science, cybersecurity, software engineering, or related fields preferred.

- 5+ years of experience in cloud security, network security, or cloud platform operations.

- Familiar with AWS security architecture and core services, including IAM, Organizations, Control Tower, VPC, EC2, EKS, S3, KMS, CloudFront, WAF, Shield, CloudTrail, GuardDuty, Security Hub, and Config.

- Familiar with TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, routing, load balancing, firewalls, and common network attack and defense principles.