Start searching
Back to Jobs
Full timeTechnology

Cloud Security Engineer

Hydrogen GroupSydney, Sydney🇦🇺Australia

Quick overview

SeniorityMid Senior
Employment typeFull Time
Work modeHybrid
LocationSydney, Sydney, Australia
GCPGitAWSEncryptionCloudFormationGitHub ActionsPythonAzureCI/CDIAM

Job description

We're looking for a hands-on, Cloud Security Engineer to strengthen the security of our clients AWS platforms. You'll work alongside platform and application teams, fixing the highest-risk issues first and shaping the guardrails that stop the same problems coming back.

What you'll be doing
  • Fixing cloud security issues directly, including vulnerabilities, misconfigurations, risky identity setups and control gaps raised through security tooling and the vulnerability management process
  • Working with the cloud platform team and workload owners to roll out changes, then confirming each fix has been applied properly and the finding is genuinely closed
  • Automating recurring fixes and control checks, and hardening the infrastructure delivery pipeline with secure pipeline templates, CloudFormation validation, secrets protection, approval steps and security gates
  • Spotting patterns behind repeat findings, then designing stronger controls, guardrails and secure platform patterns, and writing up the requirements, the options and the risk reduction you expect
  • Supporting day-to-day security operations through telemetry, incident response, standards, playbooks and audit
  • Owning the exemption process for cloud security risks: assessing the remaining risk, recording the business reason and compensating controls, getting sign-off, and tracking each exemption until it is reviewed or expires
What you'll bring
  • Deep AWS security and engineering knowledge across identity and access management, network security, encryption, secrets management, logging and workload protection
  • Python scripting skills, using AWS APIs to automate fixes and check that controls are working
  • Hands-on experience with Git, CNAPP/CSPM tools, AWS Control Tower (or similar), SIEM integration and vulnerability management
  • Experience building secure CI/CD pipelines for cloud infrastructure, including GitHub Actions or a comparable tool, automated testing, secrets handling, approval controls and deployment guardrails
  • CloudFormation experience (essential)
  • Working knowledge of NIST, ISO 27001, the ASD Essential Eight and APRA CPS 234
Nice to have
  • Sceptre, GCP and Azure experience
  • A relevant AWS security certification

Good luck

Similar jobs

Apply