Cloud Security Engineer

Role Overview

We are seeking a dedicated Cloud Security Engineer based in East Melbourne for a permanent full-time position. This role entails managing and enhancing security within a sophisticated AWS multi-account environment, leading efforts in cloud security, DevSecOps, and application security alongside an expanding engineering team. As the inaugural security specialist in the company, you will be instrumental in establishing and advancing security protocols.

Key Responsibilities

• Take full ownership of the AWS security framework across multiple accounts and continuously enhance its maturity.
• Design and implement AWS security guardrails, enforce policies, and maintain compliance controls.
• Administer AWS security services such as IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito, Service Control Policies, and Inspector.
• Perform security evaluations, threat modelling, and vulnerability assessments within cloud and application environments.
• Collaborate with software engineers to conduct secure code reviews and address vulnerabilities.
• Integrate security practices including SAST, DAST, dependency, and container scanning into CI/CD pipelines.
• Develop and manage security controls as code using tools like CloudFormation and AWS SAM.
• Provide support for secure AWS IoT Core integration bridging cloud and edge systems.
• Contribute to network security design covering VPC, Transit Gateway, VPN, and Route53.
• Assist in handling security incidents, investigations, and remediation processes.
• Promote DevSecOps methodologies and enhance security awareness within engineering teams.
• Continuously elevate security monitoring, threat detection, and overall security posture of the organization.

Candidate Profile

• Minimum 5 years of experience in roles focusing on Cloud Security, Application Security, DevSecOps or similar technical security disciplines.
• Extensive hands-on expertise with AWS security tools including IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito, and AWS Organizations.
• In-depth knowledge of application security principles, OWASP guidelines, secure code review practices, and use of SAST/DAST tools.
• Proven experience in managing security for multi-account AWS environments.
• Proficient in Infrastructure as Code tools such as CloudFormation and AWS SAM.
• Experience automating security integration within CI/CD workflows using platforms like GitHub Actions or GitLab CI.
• Competent in programming/scripting languages such as Python, Go, or Rust.
• Strong understanding of AWS networking services including VPC, Transit Gateway, VPN, and Route53.
• Familiarity with security assessments, threat modelling, and compliance frameworks.
• Experience with AWS IoT Core is an advantage.
• Relevant certifications like AWS Security Specialty, CISSP, or OSCP are highly valued.

What's Offered

• A permanent, full-time position within a dynamic, growing engineering environment.
• Autonomy to oversee and evolve AWS security strategies.
• Direct engagement with software teams to embed security methodologies.
• Opportunity to influence security architectures, processes, and engineering standards.
• Work on complex cloud and edge technologies.
• An environment that encourages significant impact and professional growth.