Cloud Security Engineer
Summary
A hands-on Cloud Security Engineer strengthening clients' AWS platforms in Sydney: fixing high-risk vulnerabilities, misconfigurations and identity issues, automating controls and secure CI/CD pipelines (Python, CloudFormation, GitHub Actions), and supporting compliance with NIST, ISO 27001, Essential Eight and APRA CPS 234.
Salary: $170k - $190k p.a.
We're looking for a hands-on, Cloud Security Engineer to strengthen the security of our clients AWS platforms. You'll work alongside platform and application teams, fixing the highest-risk issues first and shaping the guardrails that stop the same problems coming back.
What you'll be doing
- Fixing cloud security issues directly, including vulnerabilities, misconfigurations, risky identity setups and control gaps raised through security tooling and the vulnerability management process
- Working with the cloud platform team and workload owners to roll out changes, then confirming each fix has been applied properly and the finding is genuinely closed
- Automating recurring fixes and control checks, and hardening the infrastructure delivery pipeline with secure pipeline templates, CloudFormation validation, secrets protection, approval steps and security gates
- Spotting patterns behind repeat findings, then designing stronger controls, guardrails and secure platform patterns, and writing up the requirements, the options and the risk reduction you expect
- Supporting day-to-day security operations through telemetry, incident response, standards, playbooks and audit
- Owning the exemption process for cloud security risks: assessing the remaining risk, recording the business reason and compensating controls, getting sign-off, and tracking each exemption until it is reviewed or expires
What you'll bring
- Deep AWS security and engineering knowledge across identity and access management, network security, encryption, secrets management, logging and workload protection
- Python scripting skills, using AWS APIs to automate fixes and check that controls are working
- Hands-on experience with Git, CNAPP/CSPM tools, AWS Control Tower (or similar), SIEM integration and vulnerability management
- Experience building secure CI/CD pipelines for cloud infrastructure, including GitHub Actions or a comparable tool, automated testing, secrets handling, approval controls and deployment guardrails
- CloudFormation experience (essential)
- Working knowledge of NIST, ISO 27001, the ASD Essential Eight and APRA CPS 234
Nice to have
- Sceptre, GCP and Azure experience
- A relevant AWS security certification
If you would like to discuss this role further, please apply and we'll contact you within 24 hours to discuss.
Good luck!!
...
