Cloud Security Solutioning:

• Understand Malaysia and Singapore FSI cloud security requirements and compliance standards.
• Able to design and hands-on implementation of multi-cloud landing zone architecture and scalable security services. (primary: AWS & Outpost, secondary: Azure & HCI Stack ARC)
• Able to design and hands-on implementation of the automation strategy using Infrastructure as Code (IaC) tools both cloud-native and on-premise tools
• Create a detailed design document outlining the architecture components and their integration and lead the implementation
• Design and hands-on implementation of the cloud-native security tools across policing controls, IAM, infrastructure - network ACL, keys & server/workload runtime protection, encryption, logging and monitoring, and incident response/remediation automation

Devsecops:

• Design and hands-on implementation of automated security scan and testing controls - SAST DAST SCA Secret IAST RASP etc over CI/CD pipeline at both cloud and on-premise setting
• Technically competent in devsecops domain and able to lead the change in uplifting devsecops maturity across global banking organisation by implementing all the necessary capability in multi-phased approach