Senior Security Engineer

Get To Know Our GX Bank Team

GX Bank Berhad - the Grab-led Digital Bank - is the FIRST digital bank in Malaysia, approved by BNM to commence operations. We aim to leverage technology and innovation to serve the financial needs of the unserved and underserved individuals, and micro and small medium enterprises.

We are driven by our shared purpose and passion to bring positive transformation to the banking industry, starting with solutions that address the financial struggles of Malaysians and businesses.

Get To Know The Role

You will be responsible for designing, implementing, and maintaining robust security measures to protect our organisation's cloud-based infrastructure. This role involves working closely with cross-functional teams to ensure the security and compliance of cloud environments, identifying and mitigating risks, and staying current with cloud security best practices.



The Day-to-Day Activities

• Design and implement security architectures for cloud environments, ensuring the confidentiality, integrity, and availability of data.
• Ensure cloud environments comply with industry standards, regulatory requirements, and organisational security policies.
• Enforce least privilege principles and regularly review access permissions.
• Develop and implement incident response plans specific to cloud environments.
• Monitor and triage security findings across cloud environments to relevant stakeholders.
• Implement security automation and scripting to streamline security processes in the cloud.
  
  

The Must-Haves

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 2+ years of experience in cloud security roles, with a focus on public cloud platforms (AWS, Azure, or Google Cloud).
• Strong understanding of cloud security principles and best practices.
• Experience with cloud-native security tools and services.
• Excellent communication and collaboration skills.
  
  

The Nice-to-Haves

• Relevant certifications such as AWS Certified Security - Specialty, Certified Cloud Security Professional (CCSP), or equivalent.
• Knowledge of TCP/IP stack, Load balancer, Networking.
• Familiarity with the DevSecOps pipeline including relevant tools such as CSPM, CWS, SCA, SAST, and the rest.
• Familiarity in security tools like PrismaCloud, AWS Config, AWS GuardDuty, AWS Inspector.
• Proficiency in scripting and automation (e.g., Python, PowerShell).
• Proficiency in Terraform for infrastructure provisioning and management.
• Professional background within financial institutions or the banking sector.