About the Role
We are looking for a hands-on Site Reliability Engineer to strengthen the security, resilience, and operational reliability of our infrastructure, CI/CD pipelines, cloud environments, and internal platforms.
This role goes beyond day-to-day security operations. You will help design and implement practical guardrails, tools, and processes that reduce vulnerabilities, prevent key leakage, improve security hygiene, and support broader governance and compliance goals across the organization.
In addition to owning core security responsibilities, this role should be broad enough in systems and operations to support cross-team collaboration and share workload when needed across cloud infrastructure, CI/CD, platform reliability, and other high-priority TechOps initiatives.
What you will do
Identify, classify, track, and help resolve security findings across cloud environments, clusters, container images, endpoints, CI/CD pipelines, and related systems, focusing on high and critical risks.
Design, implement, and continuously improve security controls in CI/CD pipelines, including secret detection, CVE scanning, and policy-based gates, while standardizing rollout patterns across engineering teams.
Improve security across AWS and GCP environments, Kubernetes clusters, and registries by deploying scanning, sensing, and guardrail solutions to reduce attack surface at the runtime and infrastructure layers.
Propose and implement controls such as key rotation, access policies, RBAC, and fit-for-purpose authentication to remediate risks related to credential leakage, IAM misconfigurations, and excessive permissions.
Conduct periodic assessments, participate in incident handling, and build documentation or dashboards that improve security visibility and cross-team collaboration with TechOps, SRE, and stakeholders.
Qualifications
Professional Experience: 3+ years of hands-on experience in Cloud Security, DevSecOps, or Infrastructure Security roles.
GCP Security & Operations: Proven hands-on experience securing and managing GCP environments, including IAM, Service Accounts, GKE, Security Command Center, and Artifact Registry.
DevSecOps & Infrastructure: Strong background in SRE or Infrastructure Security, with expertise in CI/CD (GitLab, ArgoCD), Kubernetes, container security, and infrastructure-as-code.
Security Tooling & Remediation: Proficiency in automated scanning (CVE, secrets, images) and a track record of driving complex vulnerability remediation plans in production environments.
Core Fundamentals: Deep understanding of Linux systems, networking, RBAC, and zero-trust security patterns in a multi-cloud context.
Nice to HaveAI/LLM Integration & Governance:
Experience implementing security controls for AI platforms (Vertex AI, Gemini), model-access governance, and securing LLM-based application workflows.
Experience with AI security testing, prompt injection assessment, LLM red-teaming, and governance controls for GenAI platforms in production environments.
Automation & Observability: Skilled in Python or Bash scripting and leveraging observability stacks (Datadog, Honeycomb) to build proactive security monitoring and reporting.
Multi-Cloud: Hands-on experience with AWS security and infrastructure controls.
Why Join This Role
Work on real-world security challenges across cloud, CI/CD, internal platforms, and AI workloads.
Create visible impact on infrastructure reliability, security hygiene, and governance maturity
Help TechOps build safer, more scalable, and more operationally effective platforms and controls
Our Environment
Benefits
- Competitive salary upon experience
- 13th-month salary
- Year-end Bonus
- Flexible working time
- Personal learning and well-being budget
- Team-building budget
- Lunch and parking allowance
- Various learning activities, including internal training & sharing, international conferences, and e-learning (Udemy, LinkedIn Learning...).
- Engaging music events: Music Night, Amasing Night, Music schools…
- Employee Assistance Program to support mental health & well-being.
- Minimum 12 days of paid annual leave, plus 10 days of paid sick leave.
- 12 days working from home per year.
Skills Required
- 3+ years of hands-on experience in Cloud Security, DevSecOps, or Infrastructure Security roles
- Hands-on experience securing and managing GCP environments, including IAM, Service Accounts, GKE, Security Command Center, and Artifact Registry
- Strong background in SRE or Infrastructure Security
- Expertise in CI/CD, including GitLab and ArgoCD
- Experience with Kubernetes, container security, and infrastructure as code
- Proficiency in automated CVE, secrets, and image scanning
- Track record of driving complex vulnerability remediation plans in production environments
- Deep understanding of Linux systems, networking, RBAC, and zero-trust security patterns in a multi-cloud context
- Experience implementing security controls for AI platforms such as Vertex AI and Gemini
- Experience with model-access governance and securing LLM-based application workflows
- Experience with AI security testing, prompt injection assessment, LLM red-teaming, and GenAI governance controls
- Skilled in Python or Bash scripting
- Experience with observability stacks such as Datadog and Honeycomb
- Hands-on experience with AWS security and infrastructure controls
What We Do
Amanotes is a leading music tech company with the mission of delivering the best music interactive experience to users. Since 2014, 30+ music games and mobile applications were published under our name with 2+ billion downloads worldwide and 120+ million monthly active users. In 2019, we were proudly listed as the #1 mobile apps publisher from Southeast Asia, the #1 music games publisher in the world, and one of the top 20 mobile apps publishers in the world across all categories. If you love to work in a friendly and fun environment with music all around the corner, come join us! Explore our products on Google Play and iOS App Store such as Magic Tiles 3, Tiles Hop, Dancing Ballz, and more than 30 others.
