We’re looking for a hands-on, Cloud Security Engineer to strengthen the security of our clients AWS platforms. You’ll work alongside platform and application teams, fixing the highest-risk issues first and shaping the guardrails that stop the same problems coming back.
What you’ll be doing
- Fixing cloud security issues directly, including vulnerabilities, misconfigurations, risky identity setups and control gaps raised through security tooling and the vulnerability management process
- Working with the cloud platform team and workload owners to roll out changes, then confirming each fix has been applied properly and the finding is genuinely closed
- Automating recurring fixes and control checks, and hardening the infrastructure delivery pipeline with secure pipeline templates, CloudFormation validation, secrets protection, approval steps and security gates
- Spotting patterns behind repeat findings, then designing stronger controls, guardrails and secure platform patterns, and writing up the requirements, the options and the risk reduction you expect
- Supporting day-to-day security operations through telemetry, incident response, standards, playbooks and audit
- Owning the exemption process for cloud security risks: assessing the remaining risk, recording the business reason and compensating controls, getting sign-off, and tracking each exemption until it is reviewed or expires
What you’ll bring
- Deep AWS security and engineering knowledge across identity and access management, network security, encryption, secrets management, logging and workload protection
- Python scripting skills, using AWS APIs to automate fixes and check that controls are working
- Hands-on experience with Git, CNAPP/CSPM tools, AWS Control Tower (or similar), SIEM integration and vulnerability management
- Experience building secure CI/CD pipelines for cloud infrastructure, including GitHub Actions or a comparable tool, automated testing, secrets handling, approval controls and deployment guardrails
- CloudFormation experience (essential)
- Working knowledge of NIST, ISO 27001, the ASD Essential Eight and APRA CPS 234
Nice to have
- Sceptre, GCP and Azure experience
- A relevant AWS security certification
Good luck!!
#J-18808-Ljbffr
Cloud Security Engineer in Sydney employer: Hydrogen Group
Join a prestigious global law firm in New York City, where you will be part of a dynamic team that handles high-profile corporate transactions. The firm fosters a collaborative work culture that prioritises professional development, offering mentorship opportunities and the chance to work closely with industry leaders. With a commitment to excellence and innovation, this role provides a unique platform for growth in a vibrant city known for its legal prowess.
