AWS Cloud Security Engineer – 12-Month Hybrid Contract

Rest; Sydney; Hybrid; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Rest Days

Parental Leave

Learning & Development

Income Protection

Extra Leave

Excellence Awards

Job summary

Rest is seeking a Cloud Security Engineer—CTEM on a 12 month fixed term contract in Sydney CBD with hybrid work. You’ll secure AWS platforms, own remediation of findings, and implement preventative controls to reduce exposure for millions of Australians.

Role focuses on domain-aligned cloud security support, risk assessment and tooling automation. You’ll collaborate with platform teams and workload owners while delivering secure patterns and CI/CD improvements.

Qualifications

• Strong AWS engineering and security across IAM, network security, encryption, secrets management, logging and workload protection.
• Python scripting using AWS APIs to automate remediation and validation.
• Experience with Git, CNAPP/CSPM, AWS Control Tower or equivalent, SIEM integration and vulnerability management.
• Experience in secure CI/CD pipelines (GitHub Actions or similar), including automated testing and guardrails.
• CloudFormation experience is mandatory; familiarity with Sceptre, GCP and Azure is desirable.
• Knowledge of NIST/ISO27001/ASD Essential Eight and APRA CPS 234; AWS security certs are a plus.

Responsibilities

• Deliver remediation of cloud vulnerabilities and misconfigurations across AWS.
• Coordinate changes with Cloud Platform Services and workload owners; ensure closure per risk priorities.
• Automate remediation and validate controls; strengthen CI/CD pipelines and secure templates.
• Identify systemic risks and define new controls, guardrails and secure platform patterns.
• Support cloud security operations with telemetry, playbooks and audit evidence.
• Lead security risk exemptions with documented justification and approvals.

Skills

AWS security

Python scripting

Git

CNAPP/CSPM

CI/CD pipelines

CloudFormation

Tools

GitHub Actions

AWS Control Tower

Sceptre

GCP

Azure

Job description

Rest is seeking a Cloud Security Engineer—CTEM on a 12 month fixed term contract in Sydney CBD with hybrid work. You’ll secure AWS platforms, own remediation of findings, and implement preventative controls to reduce exposure for millions of Australians.

Role focuses on domain-aligned cloud security support, risk assessment and tooling automation. You’ll collaborate with platform teams and workload owners while delivering secure patterns and CI/CD improvements.