Cloud Security Engineer

Our client is a leading organisation in the digital asset space, supporting institutional partners with secure, innovative technology solutions. They are seeking a Cloud Security Engineer to own the security of their multi-cloud environments, designing and enforcing security architecture, driving compliance, and embedding security-first thinking across cloud infrastructure and engineering teams.

Key Responsibilities

• Lead the design, implementation, and governance of secure AWS and Azure environments, including IAM, network security, segmentation, and encryption.
• Own cloud-native security services including AWS Security Hub, GuardDuty, Azure Defender, Key Vault, and Azure Policy.
• Define and enforce cloud security baselines to meet internal policies and regulatory standards.
• Build security automation and IaC frameworks using Terraform or CloudFormation, with security controls embedded by default.
• Integrate SAST, DAST, and IaC scanning into CI/CD pipelines to shift security left across the development lifecycle.
• Configure cloud-native logging, monitoring, and alerting to support threat detection and incident response.
• Develop and maintain incident response playbooks, runbooks, and security SOPs.
• Partner with DevOps and IT teams to provide security guidance on architecture and deployment practices.
• Manage cloud asset inventory, vulnerability posture, and BCP/DR security readiness.

Requirements

• 3+ years in a Cloud Security or Security Engineering role.
• Deep expertise in AWS and/or Azure security models, native services, and shared responsibility frameworks.
• Hands-on experience with IAM, VPC/VNet design, firewalls, WAFs, and encryption at rest and in transit.
• Proficiency with Terraform or CloudFormation and security-first cloud provisioning practices.
• Scripting and automation skills in Python, Bash, or PowerShell.
• Solid understanding of DevSecOps principles and CI/CD tooling (e.g., GitHub Actions, Bitbucket Pipelines).
• Strong documentation skills and ability to communicate clearly across technical and non-technical stakeholders.
• Bonus: Experience in regulated industries, relevant certifications (AWS Security Specialty, AZ-500, CCSP), or exposure to AI-assisted security tooling.

What's Offered

A high-autonomy environment where your security expertise will directly shape cloud strategy and resilience. Flexible working, a supportive culture, and strong opportunities for long-term development.