The posting
About the Role
What you will do
- Identify, classify, track, and help resolve security findings across cloud environments, clusters, container images, endpoints, CI/CD pipelines, and related systems, focusing on high and critical risks.
- Design, implement, and continuously improve security controls in CI/CD pipelines, including secret detection, CVE scanning, and policy-based gates, while standardizing rollout patterns across engineering teams.
- Improve security across AWS and GCP environments, Kubernetes clusters, and registries by deploying scanning, sensing, and guardrail solutions to reduce attack surface at the runtime and infrastructure layers.
- Propose and implement controls such as key rotation, access policies, RBAC, and fit-for-purpose authentication to remediate risks related to credential leakage, IAM misconfigurations, and excessive permissions.
- Conduct periodic assessments, participate in incident handling, and build documentation or dashboards that improve security visibility and cross-team collaboration with TechOps, SRE, and stakeholders.
Qualifications
- Professional Experience: 3+ years of hands-on experience in Cloud Security, DevSecOps, or Infrastructure Security roles.
- GCP Security & Operations: Proven hands-on experience securing and managing GCP environments, including IAM, Service Accounts, GKE, Security Command Center, and Artifact Registry.
- DevSecOps & Infrastructure: Strong background in SRE or Infrastructure Security, with expertise in CI/CD (GitLab, ArgoCD), Kubernetes, container security, and infrastructure-as-code.
- Security Tooling & Remediation: Proficiency in automated scanning (CVE, secrets, images) and a track record of driving complex vulnerability remediation plans in production environments.
- Core Fundamentals: Deep understanding of Linux systems, networking, RBAC, and zero-trust security patterns in a multi-cloud context.
- AI/LLM Integration & Governance:
- Experience implementing security controls for AI platforms (Vertex AI, Gemini), model-access governance, and securing LLM-based application workflows.
- Experience with AI security testing, prompt injection assessment, LLM red-teaming, and governance controls for GenAI platforms in production environments.
- Automation & Observability: Skilled in Python or Bash scripting and leveraging observability stacks (Datadog, Honeycomb) to build proactive security monitoring and reporting.
- Multi-Cloud: Hands-on experience with AWS security and infrastructure controls.
Why Join This Role
- Work on real-world security challenges across cloud, CI/CD, internal platforms, and AI workloads.
- Create visible impact on infrastructure reliability, security hygiene, and governance maturity
- Help TechOps build safer, more scalable, and more operationally effective platforms and controls
Our Environment
Benefits
- Competitive salary upon experience
- 13th-month salary
- Year-end Bonus
- Flexible working time
- Personal learning and well-being budget
- Team-building budget
- Lunch and parking allowance
- Various learning activities, including internal training & sharing, international conferences, and e-learning (Udemy, LinkedIn Learning...).
- Engaging music events: Music Night, Amasing Night, Music schools…
- Employee Assistance Program to support mental health & well-being.
- Minimum 12 days of paid annual leave, plus 10 days of paid sick leave.
- 12 days working from home per year.
Consent Notice for Personal Data Processing
- By applying to any position at Amanotes, you acknowledge and agree that your personal data will be collected and processed for recruitment-related purposes. Please read the “Consent Notice for Personal Data Processing” carefully before submitting your application.
- Thank you for your interest in joining Amanotes.
About Amanotes
We are Amanotes – a dynamic music game company that’s using cutting-edge technology to transform how people experience music.
Since 2014, we’ve led the global simple music game market with over 3.5 billion downloads across 190+ countries, including chart-topping titles like Magic Tiles 3, Tiles Hop, Dancing Road, and Duet Cats.
As the #1 Music Game Publisher worldwide and the #1 App Publisher from Southeast Asia by downloads, our ambition is clear: to create iconic, hybrid-casual music games that people love and play for years.
What truly sets Amanotes apart is not just what we build — it’s how we grow and who we grow with:
🎓 We invest in your growth through learning budgets, coaching, and stretch opportunities.
🎶 We embrace a creative and dynamic culture, where everyone can play, share, and thrive.
🧘 We believe in work-life harmony — your rhythm matters here.
🏆 We recognize and reward impact, with competitive benefits and clear development paths.
Come join our music-filled workplace, where innovation meets rhythm — and let’s create a magical music experience together.
Amanotes – Where Everyone Can Music.
How To Apply?
Click the button or contact us at [email protected].
