Cloud Security Engineer

About the Role This role focuses on strengthening cloud security posture by identifying, prioritising, and remediating security risks across AWS environments. You will play a key role in embedding security controls into infrastructure and automation, ensuring scalable and secure cloud operations. Key Responsibilities • Take ownership of CSPM alert backlog, executing remediation actions such as IAM role adjustments, security group optimisation, and fixing cloud resource misconfigurations • Analyse and remediate security issues directly within Terraform and CloudFormation templates to prevent recurring vulnerabilities • Design and implement preventive guardrails using AWS Organizations Service Control Policies (SCPs) to reduce high-risk configurations • Develop and maintain automated remediation solutions using AWS Lambda, AWS Config Rules, and scripting to address common findings • Collaborate with application and engineering teams to communicate risks and provide clear remediation guidance while maintaining system functionality • Enhance cloud security posture through continuous monitoring, prioritisation, and resolution of CSPM findings • Contribute to improving infrastructure security standards and best practices across cloud deployments Required Qualifications • Strong expertise in AWS security services and configurations, including IAM, S3, EC2, and VPC controls in enterprise-scale environments • Advanced proficiency in Infrastructure as Code tools such as Terraform (preferred) or CloudFormation • Experience with automation and scripting using Python (including Boto3) or Bash • Hands-on experience with Cloud Security Posture Management tools such as AWS Security Hub • Ability to analyse, prioritise, and remediate security findings effectively • Strong understanding of cloud security risks, misconfigurations, and best practices • Proven ability to collaborate with cross-functional teams and balance security with operational requirements Preferred Qualification…