Cloud Security Engineer

We're looking for a hands-on, Cloud Security Engineer to strengthen the security of our clients AWS platforms. You'll work alongside platform and application teams, fixing the highest-risk issues first and shaping the guardrails that stop the same problems coming back.

What you'll be doing

• Fixing cloud security issues directly, including vulnerabilities, misconfigurations, risky identity setups and control gaps raised through security tooling and the vulnerability management process
• Working with the cloud platform team and workload owners to roll out changes, then confirming each fix has been applied properly and the finding is genuinely closed
• Automating recurring fixes and control checks, and hardening the infrastructure delivery pipeline with secure pipeline templates, CloudFormation validation, secrets protection, approval steps and security gates
• Spotting patterns behind repeat findings, then designing stronger controls, guardrails and secure platform patterns, and writing up the requirements, the options and the risk reduction you expect
• Supporting day-to-day security operations through telemetry, incident response, standards, playbooks and audit
• Owning the exemption process for cloud security risks: assessing the remaining risk, recording the business reason and compensating controls, getting sign-off, and tracking each exemption until it is reviewed or expires

What you'll bring

• Deep AWS security and engineering knowledge across identity and access management, network security, encryption, secrets management, logging and workload protection
• Python scripting skills, using AWS APIs to automate fixes and check that controls are working
• Hands-on experience with Git, CNAPP/CSPM tools, AWS Control Tower (or similar), SIEM integration and vulnerability management
• Experience building secure CI/CD pipelines for cloud infrastructure, including GitHub Actions or a comparable tool, automated testing, secrets handling, approval controls and deployment guardrails
• CloudFormation experience (essential)
• Working knowledge of NIST, ISO 27001, the ASD Essential Eight and APRA CPS 234

Nice to have

• Sceptre, GCP and Azure experience
• A relevant AWS security certification

Good luck