Cloud Security Engineer

About the role

This role is responsible for owning and maturing the AWS security stack for a platform that bridges cloud services and edge hardware. You will embed security directly into engineering workflows and protect real‑world device connectivity.

Key responsibilities

• Own and mature the AWS security stack (Identity Center, Security Hub, GuardDuty, WAF, Cognito, IAM, SCPs, Inspector).
• Design and enforce guardrails, policies, and compliance controls across a multi‑account AWS environment.
• Run threat modelling, vulnerability analysis, and security assessments for cloud and application layers.
• Secure the cloud‑to‑edge boundary, including device connectivity and data flows.
• Review and shape network security architecture (VPC, Transit Gateway, VPN, Route53).
• Codify security controls as Infrastructure as Code using CloudFormation or SAM.
• Integrate security into CI/CD pipelines (SAST/DAST, dependency and container scanning).
• Lead or support incident response and security investigations.
• Define identity and access strategies for applications.

Required profile

• 5+ years of experience in cloud security engineering, application security, or a related role.
• Strong hands‑on experience with the AWS security stack and multi‑account environments.
• Solid understanding of application security (OWASP Top 10, secure code review, SAST/DAST tooling).
• Experience with network security architecture from a security perspective.
• Proficiency in IaC (CloudFormation/SAM) and security automation.

Required skills

• AWS Identity Center, Security Hub, GuardDuty, WAF, Cognito, IAM, SCPs, Inspector
• Network security: VPC, Transit Gateway, VPN, Route53
• Infrastructure as Code: CloudFormation, SAM
• CI/CD tools: GitHub Actions, GitLab CI
• Programming for security automation: Python, Go, Rust
• Application security frameworks: OWASP Top 10, SAST, DAST