Cloud & Infrastructure Security Enginee
About BJAK
At BJAK, we're on a mission to empower individuals with smarter, more accessible ways to plan, save, and grow their money. This core belief is the origin of our name and our drive.
Since our inception in 2019, BJAK has revolutionized financial accessibility by building the first mobile-first insurance platform in Southeast Asia. Today, we stand proud as the region's leading platform, making insurance accessible to millions.
Our vision has expanded beyond insurance to a holistic financial ecosystem, encompassing spending, saving, investing, foreign exchange, travel, and more. Our overarching mission: to help everyone get more from their money, every single day.
We are a global team, diverse and vibrant, spanning over 20 nationalities across our offices and remote hubs. We foster a culture where passion drives innovation and collaboration, not just clock-watching. We're seeking driven individuals who love building next-generation products, challenging the status quo, and redefining how everyone can access the best financial applications, not just an exclusive few.
If you're ready to make a tangible impact and contribute to a truly transformative mission, we want to hear from you.
Your Mission
As a **Cloud & Infrastructure Security Engineer** at BJAK, you will be a pivotal guardian of our digital frontier. You'll be instrumental in securing our critical cloud environments (AWS, GCP), networks, compute platforms, and core infrastructure. Your expertise will fortify our systems by enhancing configuration, refining access controls, elevating monitoring capabilities, bolstering resilience, and meticulously managing technology risk.
What You'll Be Doing
Architect and implement robust security controls across AWS and GCP infrastructure, networks, compute, storage, and platform services.
Proactively audit cloud configurations and infrastructure changes for misconfigurations, excessive permissions, exposure, and resilience risks.
Own and optimize Identity & Access Management (IAM), privileged access, network segmentation, encryption, key management, secrets management, and secure connectivity solutions.
Drive continuous improvement in cloud security monitoring, logging, alerting, threat detection, and incident response protocols.
Lead the implementation and assurance of cloud and infrastructure controls aligned with **SC TRM** and **BNM RMiT** regulatory frameworks, including evidence gathering, testing, remediation, and audit support.
Champion security automation by developing infrastructure-as-code and scripting tools for guardrails and checks.
Collaborate with engineering teams to enhance vulnerability management, disaster recovery (backup & recovery), business continuity, and secure operational practices.
What You'll Bring
A Bachelor's degree in Computer Science, IT, Cybersecurity, or a related technical field, or equivalent practical experience.
3+ years of hands-on experience in cloud, infrastructure, systems, or dedicated security engineering roles.
Demonstrated experience in implementing and owning **SC TRM** and **BNM RMiT** controls specific to cloud and technology infrastructure.
Proven, hands-on expertise in securing complex **AWS** and **GCP** environments and cloud-native architectures.
Deep understanding and practical knowledge of **IAM**, networking principles, firewalls, encryption, key management, system hardening, and cloud security posture management (CSPM).
Proficiency with infrastructure as code (IaC) tools, automation scripting, vulnerability scanning, centralized logging, and incident response procedures.
Exceptional troubleshooting skills and the ability to communicate complex security concepts effectively across platform, application, and compliance teams.
Language
Given our global team, strong proficiency in English, both written and verbal, is essential for effective collaboration.