Cloud Security Engineer - Vulnerability Management
Posted 8
views
Summary
Hands-on cloud security engineer role focused on managing and improving vulnerability and exposure management across a large, regulated organisation's AWS environment: identifying and prioritising vulnerabilities, driving remediation with engineering teams, and automating controls using Python, AWS APIs, CloudFormation and GitHub Actions.
Our client is looking for an experienced Cloud Security Engineer to join a large, complex and highly regulated organisation that continually invests in its cyber security capability.
This is a hands-on security engineering role that combines strong technical security skills with practical experience managing security vulnerabilities, exposure and risk across large-scale technology environments.
You will provide domain-aligned cloud security support across the AWS platform and engineering teams, helping identify, prioritise and remediate security risks while partnering closely with engineering, infrastructure, architecture and technology teams.
Key Responsibilities
Skills and experience required.
If you have the requested skills and experience required, then please apply NOW to paul@novon.com.au
This is a hands-on security engineering role that combines strong technical security skills with practical experience managing security vulnerabilities, exposure and risk across large-scale technology environments.
You will provide domain-aligned cloud security support across the AWS platform and engineering teams, helping identify, prioritise and remediate security risks while partnering closely with engineering, infrastructure, architecture and technology teams.
Key Responsibilities
- Manage and improve the organisation's vulnerability and exposure management capability.
- Identify, assess and prioritise vulnerabilities across cloud, infrastructure, and applications.
- Work with technology teams to drive timely remediation and reduce the organisation's overall security exposure.
- Perform security assessments of cloud environments, applications and infrastructure.
- Monitor and investigate security weaknesses, misconfigurations and emerging threats.
- Provide practical security guidance to engineering and technology teams.
- Support security uplift initiatives across a large and complex technology environment.
- Contribute to security standards, controls, processes and technical documentation.
- Work closely with Cyber Security, Infrastructure, Cloud, DevOps, Architecture and Application teams.
- Assist with security tooling, automation and continuous improvement of security operations.
Skills and experience required.
- Strong background in AWS cloud engineering and knowledge across IAM, Network Security and workload protection.
- Strong background in Python scripting, using AWS APIs to automate remediation and controls.
- Strong background in SIEM integration, vulnerability, and exposure management.
- Background in creating CI/CD pipelines for cloud infrastructure [GitHub Actions].
- Strong background in CloudFormation, with knowledge of Sceptre, Azure and/or GCP - highly desirable.
- Knowledge of NIST, ISO 27001, Essential Eight, APRA CPS 234 + any relevant AWS security certifications - highly desirable.
- Strong collaboration and business engagement skills.
If you have the requested skills and experience required, then please apply NOW to paul@novon.com.au
