Cloud Security Engineer

Senior Cloud Security Engineer (AWS) - Job Overview

We are actively seeking a highly proficient Senior Cloud Security Engineer with extensive, architect-level expertise in Amazon Web Services (AWS) and a robust background in software engineering. This is a hands-on, deeply technical security engineering role dedicated to designing, developing, and automating cloud-native security solutions exclusively within AWS environments.

The successful candidate will be tasked with creating secure AWS landing zones, implementing container and Kubernetes security measures, and developing Infrastructure as Code (IaC) to automate security processes effectively.

Ideal Candidate Profile

• IaC & Automation Expertise: Practical experience with Terraform for infrastructure provisioning and a strong foundation in Python programming.
• AWS Security Architecture Proficiency: Demonstrated experience designing AWS landing zones, account segmentation strategies, and deploying native AWS security services such as AWS Control Tower, Organizations, IAM, KMS, GuardDuty, Security Hub, Config, CloudTrail, and WAF.
• Kubernetes Security Skills: Proven hands-on experience securing containerized workloads and Kubernetes clusters (EKS), with knowledge comparable to Certified Kubernetes Security Specialist (CKS).
• Relevant Certifications (Preferred but not mandatory):
• AWS Certified Solutions Architect – Professional
• AWS Certified Security – Specialty
• Certified Kubernetes Security Specialist (CKS)

Applicants Who Should Not Apply (Exclusion Criteria)

Please review these criteria prior to submitting your application to ensure alignment:

• Multi-Cloud / Non-AWS Focus: We operate exclusively on AWS. Candidates lacking direct, hands-on AWS architect-level experience will not be considered.
• Management & Non-Technical Roles: Individuals primarily experienced in security team management, P&L oversight, or vendor/SLA governance are not suitable.
• SIEM, SecOps, GRC & VAPT: Candidates whose expertise is limited to Security Operations Center (SOC) activities, SIEM monitoring, Governance, Risk, and Compliance (GRC), or vulnerability assessment and penetration testing (VAPT).
• DevOps / CI-CD Scanners Only: Those with security experience confined to configuring static and dynamic application security testing (SAST, DAST) or Software Composition Analysis (SCA) tools within CI/CD pipelines.

Primary Responsibilities

1. AWS Cloud Security Architecture & Governance

• Design and deploy enterprise-grade AWS security architectures, including multi-account landing zones utilizing Control Tower or Organizations, along with identity segregation models.
• Implement and manage native AWS security services such as IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, and WAF.
• Enforce Zero Trust security principles, establish strict IAM policies, and ensure comprehensive data encryption at rest and in transit across all AWS platforms.

2. Infrastructure as Code (IaC) & Security Automation

• Create, maintain, and enforce security policies through modular, well-structured Terraform templates.
• Develop custom security automation scripts, automated remediation workflows, and tools using Python.
• Secure Amazon Elastic Kubernetes Service (EKS) environments, ensuring rigorous pod security policies, network segmentation, and secrets management.

3. Vulnerability Management & Incident Response

• Proactively identify, prioritize, and automate remediation of security vulnerabilities and misconfigurations within AWS landing zones.
• Deploy and oversee Cloud Native Application Protection Platforms (CNAPP, CSPM, CWPP) to continuously monitor and enforce cloud posture compliance.

Qualifications & Skills

Minimum Requirements

• Educational Background: Degree or Diploma in Computer Science, Information Technology, Computer/Electronics Engineering, or related technical discipline.
• Professional Experience: At least 4+ years in cloud security engineering, AWS architecture hardening, and automated risk mitigation.
• Technical Competencies:
• Cloud Platform: Extensive AWS experience at an architect level.
• IaC & Programming: Advanced skills in Terraform and Python.
• Container Security: Practical experience securing EKS and Kubernetes environments.