About BJAK: Pioneering the Future of FinTech
At BJAK, we believe everyone deserves smarter ways to plan, save, and grow their money. This core conviction is the foundation of our mission and our name.
Since our inception in 2019, we've revolutionized the insurance landscape by building Southeast Asia's first mobile-first insurance platform. This innovation has made insurance accessible online to millions, establishing us as the region's undisputed leader in the space.
Today, our ambition extends beyond insurance. We are rapidly expanding our offerings to empower people across the region with comprehensive solutions for spending, saving, investing, exchanging, travelling, and more. Our mission is clear: help people get more from their money every single day.
We are a vibrant, global team, with over 20 nationalities collaborating from offices and remotely. We're united by a shared passion for our work, driven by impact, not just hours. We seek innovators who are eager to build the next generation of products, challenging the status quo, and committed to redefining access to the best financial applications for everyone, not just an exclusive few.
If you are this person – passionate, driven, and ready to make a significant impact – we invite you to connect with us.
Forge the Future of FinTech Security as a Cloud Security Engineer at BJAK!
Are you ready to be the guardian of our cutting-edge financial ecosystem? At BJAK, we're not just building products; we're redefining how millions manage their money across Southeast Asia. As a Cloud Security Engineer, you'll play a pivotal role in safeguarding our entire cloud footprint – from AWS and GCP environments to our core networks, compute platforms, and critical infrastructure. Your mission will be to architect, implement, and fortify our security posture, ensuring robust configurations, impenetrable access controls, vigilant monitoring, unwavering resilience, and comprehensive technology risk management.
Your Impact & Key Responsibilities
Design and maintain robust security controls across our diverse AWS and GCP infrastructure, encompassing networks, compute, storage, and platform services.
Proactively review cloud configurations and infrastructure changes, identifying and mitigating misconfigurations, excessive permissions, exposure risks, and resilience vulnerabilities.
Expertly manage Identity and Access Management (IAM), privileged access, network segmentation, encryption, key management, secrets management, and secure connectivity solutions.
Enhance our cloud security monitoring, logging, alerting, threat detection, and incident response capabilities to ensure swift and effective remediation.
Take ownership of cloud and infrastructure controls mandated by SC TRM and BNM RMiT, including evidence collection, rigorous testing, remediation efforts, and audit support.
Develop and deploy automated security checks and infrastructure guardrails utilizing infrastructure-as-code principles and scripting tools.
Partner with engineering teams to continuously improve vulnerability management, backup, recovery, business continuity, and secure operational practices.
What You'll Bring
Educational Foundation: Bachelor's degree in Computer Science, IT, Cybersecurity, or a related technical field, or equivalent practical experience.
Proven Expertise: 3+ years of progressive experience in cloud, infrastructure, systems, or security engineering roles.
Regulatory Acumen: Demonstrable experience in implementing and taking ownership of SC TRM and BNM RMiT controls specifically for cloud and technology infrastructure.
Cloud Mastery: Hands-on, in-depth experience securing complex AWS and GCP environments, including proficiency with cloud-native architectures.
Technical Prowess: Strong command of core security domains: IAM, network security (firewalls, segmentation), encryption, key management, system hardening, and Cloud Security Posture Management (CSPM).
Automation & Ops: Practical experience with infrastructure as code (e.g., Terraform, CloudFormation, GCP Deployment Manager), automation scripting, vulnerability scanning, centralized logging solutions, and incident response frameworks.
Collaborative Spirit: Exceptional troubleshooting and problem-solving abilities, coupled with strong communication skills to effectively collaborate across platform, application, and compliance teams.
Global Communication
As a global team, strong English communication skills (written and verbal) are essential for effective collaboration.