Position Responsibilities
We are hiring a Cloud Security Engineer to execute and improve the security posture of our cloud and platform environments. This role is hands-on and engineering-driven, focused on reducing real security risk through practical controls, automation, and collaboration.
You will work closely with Platform/Infrastructure, DevOps, Engineering, and IT Ops teams to embed security into day-to-day operations. This role reports to the Security Manager and plays a critical part in strengthening IAM, cloud configurations, pipelines, and detection capabilities as the company scales.
1.Cloud security execution
- Secure and continuously improve AWS environments, including IAM, networking, logging, and baseline configurations.
- Identify, prioritise, and remediate cloud misconfigurations and insecure patterns.
- Partner with Infrastructure teams to implement secure-by-default cloud architectures.
2. Identity and access management (IAM)- Review and reduce over-permissioned access across cloud and systems.
- Implement and maintain least-privilege IAM role models.
- Support joiner/mover/leaver processes in collaboration with IT Ops.
- Assist with privileged access controls and access review processes.
3. CI/CD and platform security- Work with DevOps teams to secure CI/CD pipelines.
- Implement controls to prevent secrets leakage and insecure deployments.
- Improve secrets management, key rotation, and environment separation.
- Support infrastructure-as-code security practices and reviews.
4. Monitoring, detection, and response support- Improve security logging, alerting, and visibility across cloud environments.
- Support detection of abnormal or risky behaviour.
- Assist the Security Manager during incident investigations and root-cause analysis.
- Ensure security findings lead to concrete remediation actions.
5. Security standards implementation- Translate security policies and standards into technical controls and guardrails.
- Ensure security requirements are enforced through systems and automation rather than manual checks.
- Help teams adopt secure patterns without slowing delivery.
6. Collaboration and enablement- Work directly with Infrastructure and Engineering teams on remediation and improvements.
- Explain security risks and solutions clearly to engineers.
- Avoid “security vs engineering” dynamics by focusing on outcomes and practicality.
- Provide input and feedback to help shape future security standards and tooling.