Cloud Security Engineer

Responsibilities:

• Shape cloud security across AWS, GCP, and Azure environments.
• Advance cloud security posture management by identifying risk, prioritising remediation, and helping teams strengthen controls at scale.
• Develop and enforce Key Risk Indicators (KRIs) to ensure compliance with industry-leading frameworks such as NIST CSF and Cloud Security Alliance CCM, leading to cloud security operational excellence.
• Design cloud-focused identity and access management guardrails that enforce least privilege and support secure, efficient cloud adoption.
• Ensure appropriate logging and monitoring across cloud infrastructure, services, identities, and workloads to improve visibility and response readiness.
• Build security-as-code controls using OPA to automate policy enforcement and reduce manual review across cloud deployments.
• Partner with engineering teams to embed security requirements into cloud architecture, delivery pipelines, and operational processes.
• Manage cloud risk through Cloud Security Posture Management (CSPM) and Cloud Detection and Response (CDR) tools.
• Investigate cloud security findings and coordinate remediation with accountable teams to reduce exposure and strengthen resilience.

Requirements:

• Five or more years of experience in cloud security or cloud engineering, with a focus on hands- on experience managing cloud security posture across AWS, GCP, and Azure environments, with an emphasis on AWS.
• Deep understanding of cloud architecture, frameworks and cloud security best practices, and a proven track record of successfully implementing secure, highly available cloud applications.
• Strong understanding of identity and access management principles in cloud environments, including least privilege and access governance.
• Hands-on experience building security-as-code or policy-as-code controls using OPA.
• In-depth experience with Cloud Security Posture Management (CSPM) platforms such as Wiz or Prisma Cloud and Cloud Detection and Risk (CDR) tools.
• Experience improving cloud security operational processes, including control validation, remediation tracking, and continuous improvement.
• Strong analytical, communication, and collaboration skills, with the ability to work effectively across security, engineering, and leadership stakeholders.
• Commitment to the highest ethical standards.

Must Have:

• 5+ years in Cloud Security / Cloud Engineering.
• Strong AWS experience.
• Hands-on experience across AWS, GCP and Azure.
• Strong Cloud Security Architecture knowledge.
• IAM / Least Privilege / Access Governance.
• Hands-on OPA / Policy-as-Code / Security-as-Code.
• Experience with CSPM.
• Experience with Wiz or Prisma Cloud.
• Experience with Cloud Detection and Response (CDR).
• Cloud security risk assessment and remediation.