Offer summary

Qualifications:

7+ years of hands-on security engineering experience in cloud-native environments., Expert knowledge of AWS and Azure services and security practices., Proven experience with SIEM platforms, vulnerability management, and security controls., Strong communication skills to brief technical teams and executives..

Key responsibilities:

Design and implement secure SDLC processes with automated controls.

Harden cloud estates and manage security tools like SIEM and WAFs.

Lead security architecture reviews and communicate findings to clients.

Continuously evaluate threats and recommend improvements.

Job description

As a Security Engineer, you will own endtoend security across multiple enterprise and midmarket cloud projects. Your initial mission is to embed automated controls and best practices into every AWS and Azurebased delivery, shifting the organisation from reactive fixes to a proactive security posture. Reporting directly to the Director of Engineering, Cloud, you will partner daily with Technology, Cloud, Engineering and AccountManagement teams and act as a clientfacing security authority able to brief both technical staff and Clevel executives.

Your Responsibilities

Design, implement and enforce comprehensive Secure SDLC processes, integrating automated security controls, threat modeling, secure coding standards, and continuous security testing throughout the entire development lifecycle.
Develop, document and enforce security policies in our Confluencebased knowledge base and project DMS.
Harden multiaccount AWS and Azure estates (EC2, S3, IAM, VPC, CloudTrail, CloudFront; Virtual Machines, Storage Accounts, Key Vault, NSG, Policy, Monitor).
Deploy and tune SIEMlogmanagement platforms (Splunk, ELK, Microsoft Sentinel); craft queries and dashboards that surface actionable threats.
Run scheduled and continuous vulnerability scans (Qualys, Rapid7, Defender), interpret results and drive remediation with Engineering.
Configure and manage security edge controls—firewalls, WAFs (Akamai, AWSAzure WAF) and IDSIPS—tailored to each client’s risk profile.
Integrate SCA (Trivy, Grype, Snyk) and DAST (OWASP ZAP) tooling into build pipelines; champion securebydesign coding practices.
Lead security architecture reviews and threatmodel sessions with crossfunctional, multicountry delivery teams.
Present findings, roadmaps and risk mitigation strategies directly to enterprise clients, translating technical issues into clear business impact.
Continuously evaluate emerging threats, ZeroTrust patterns and supplychain risks; recommend tooling and process improvements that keep us ahead of thirdparty scans.