Cloud Vulnerability Management & DevSecOps

About Us

Tentacle Tech is an IT and software development consulting company serving some of Malaysia's largest enterprises. We deliver technology solutions, software development services, and IT consulting across multiple industries. We are looking for a talented professional to join our growing team.

The Role

We are seeking an experienced Cloud Vulnerability Management & DevSecOps professional to strengthen cloud security operations within a leading finance sector environment. In this role, you will take ownership of end-to-end vulnerability management across Azure and AWS, lead cloud penetration testing engagements, and embed security controls into CI/CD pipelines, all while mentoring junior team members and advising cross-functional stakeholders on strengthening the organisation's overall cloud security posture.

What You'll Do

• Manage end-to-end vulnerability management for Azure and AWS environments

• Perform risk-based prioritization and coordinate remediation with Cloud, DevOps, and application teams

• Integrate security controls into CI/CD pipelines including SAST, DAST, SCA, secrets scanning, container and IaC scanning

• Lead cloud penetration testing and red teaming engagements across AWS, Azure, and GCP

• Support software supply chain security including SBOMs, provenance, code signing, and opensource governance

• Produce dashboards and metrics on cloud vulnerability risk and DevSecOps maturity

• Mentor and coach junior penetration testers while collaborating with Security Operations, Risk, and Engineering teams

What We're Looking For

• Bachelor's Degree in Computer Science, Information Security, Cybersecurity, or related technical field

• Minimum 5 years of experience in penetration testing, with 2–3 years focused on cloud platforms (AWS, Azure, GCP)

• Proven experience in cloud infrastructure penetration testing, misconfiguration exploitation, and offensive tool development

• Hands-on experience with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, or CircleCI

• Strong knowledge of IAM, cloud networking, containers, and offensive security tools (Pacu, ScoutSuite, Prowler, Burp Suite)

• Experience in regulated environments such as banking or finance is highly advantageous

• Strong communication, leadership, and mentoring abilities

What We Offer

• Competitive salary

• Opportunity to work on high-impact projects within the finance sector

• Mentorship and structured career progression

• Supportive and collaborative team environment

• Continuous learning and exposure to cutting-edge cloud security practices

How to Apply

Apply now with your latest CV, or reach out to our recruitment team to learn more.