At a Glance
- Tasks: Design and implement cutting-edge cloud security solutions while collaborating with diverse teams.
- Company: Join BMP Technologies, a leader in tech consulting across Australia and New Zealand.
- Benefits: Enjoy a competitive salary, inclusive culture, and opportunities for professional growth.
- Other info: Dynamic work environment with a focus on innovation and continuous improvement.
- Why this job: Make a real impact by enhancing security for enterprise applications and APIs.
- Qualifications: Experience in cloud security and strong skills in JavaScript or Python required.
The predicted salary is between 90000 - 110000 $ per year.
Company
BMP Tec One Pt Y Ltd
Location
Sydney, NSW
Employment type
- Full Time
- Senior Cloud Security Engineer - Cloudflare, WAF & API Security
Company
BMP Tec One Pt Y Ltd
Location
Sydney, NSW
Employment type
- Full Time
- Key selling points
- Deliver hands-on cloud and application security engineering.
- Build security tooling using Cloudflare Workers, Java Script and Python.
- Collaborate with enterprise application, infrastructure and security teams.
- About BMP Technologies
BMP Technologies provides technology consulting and delivery services to clients across Australia and New Zealand, supported by onshore and offshore teams.
Our capabilities include cloud engineering, cybersecurity, software development, Dev Sec Ops and managed services.
About the role
We are seeking a Senior Cloud Security Engineer to design, develop, implement and support cloud and edge security solutions.
Working closely with application developers, architects and infrastructure teams, you will protect enterprise applications and APIs, develop security automation and improve the effectiveness of security controls.
This role combines hands-on engineering with troubleshooting, technical documentation and stakeholder collaboration.
Key responsibilities
- Design, implement and maintain Cloudflare security services, including WAF, bot protection, rate limiting and API security.
- Develop and support Cloudflare Workers for secure request handling, proxy services and custom security controls.
- Build and integrate security applications, diagnostic tools and automation using Java Script, Type Script or Python.
- Configure and tune managed and custom WAF rules to mitigate threats while reducing false positives.
- Implement and support Zero Trust access controls in collaboration with identity and infrastructure teams.
- Analyse application traffic, security logs and API behaviour to investigate threats and resolve security issues.
- Test and validate security controls before deployment, including regression testing, rollback planning and operational verification.
- Integrate security telemetry with SIEM and monitoring platforms.
- Collaborate with developers to remediate vulnerabilities and strengthen application and API security.
- Maintain technical designs, configuration documentation, deployment procedures and operational runbooks.
- Support incident investigation, service resilience and continuous improvement.
Essential skills and experience
- Demonstrated experience in cloud security, application security or cybersecurity engineering within enterprise environments.
- Strong hands-on experience with Cloudflare WAF, Workers, bot management and rate limiting.
- Practical development experience with Java Script or Type Script and scripting or automation skills in Python or Power Shell.
- Strong understanding of HTTP/S, DNS, TLS, reverse proxies, CDN architecture and web application traffic.
- Experience securing REST or Graph QL APIs, including authentication, authorisation and abuse prevention.
- Experience tuning WAF policies and investigating OWASP-related application threats.
- Ability to design, implement, test and support security solutions across the delivery lifecycle.
- Experience analysing security events using SIEM or observability platforms.
- Strong troubleshooting, documentation and stakeholder communication skills.
- Relevant qualifications in information technology, computer science or cybersecurity, or equivalent practical experience.
Desirable experience
- Cloudflare Access, Gateway, Tunnel, D1 or Workers KV.
- Akamai, F5 Advanced WAF/ASM, Imperva or comparable security platforms.
- AWS, Azure or Google Cloud security.
- Infrastructure as code, CI/CD and automated security testing.
- Kubernetes and container security.
- Familiarity with PCI DSS, ISO 27001 or SOC 2 control requirements.
- Relevant cloud, networking or cybersecurity certifications.
BMP Technologies welcomes applications from people of all backgrounds and values an inclusive workplace.
#J-18808-Ljbffr
Senior Cloud Security Engineer in Sydney employer: BMP Technologies
As a Change Manager in Digital Transformation at our Sydney CBD location, you will be part of a dynamic team dedicated to driving impactful change across the organisation. We pride ourselves on fostering a collaborative work culture that values innovation and continuous learning, offering ample opportunities for professional growth and development. With a focus on employee well-being and engagement, we provide a supportive environment where your contributions are recognised and rewarded, making us an excellent employer for those seeking meaningful and rewarding employment.
