Cloud Security Engineer

About the role

Join a fast‑growing engineering team as the first dedicated security hire, responsible for securing a complex multi‑account AWS environment and embedding security throughout the development lifecycle.

Key responsibilities

• Own and mature the AWS security environment across multiple accounts.
• Design and implement guardrails, policies and compliance controls using services such as IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito, SCPs and Inspector.
• Conduct security assessments, threat modelling and vulnerability analysis for cloud and application workloads.
• Embed SAST, DAST, dependency and container scanning into CI/CD pipelines and implement security as code with CloudFormation or AWS SAM.
• Support secure AWS IoT Core integration and contribute to network security architecture (VPC, Transit Gateway, VPN, Route53).
• Assist with security incidents, investigations and remediation, and drive DevSecOps practices across engineering teams.

Required profile

• 5+ years of experience in cloud security, application security or DevSecOps.
• Hands‑on experience securing multi‑account AWS environments and using AWS security services.
• Background in an engineering or product team with ownership of security controls.

Required skills

• AWS services: IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito, SCPs, Inspector.
• Infrastructure as Code: CloudFormation, AWS SAM.
• CI/CD integration: GitHub Actions, GitLab CI.
• Programming languages: Python, Go, Rust.
• Network knowledge: VPC, Transit Gateway, VPN, Route53.
• Application security: OWASP, secure code review, SAST, DAST, threat modelling.

What we offer

• Permanent, full‑time role with ownership of AWS security.
• Opportunity to shape security architecture, processes and engineering standards.
• Work directly with software engineering teams in a fast‑paced environment.