AWS Cloud Security Engineer — DevSecOps Leader

Blackbook Recruitment; City of Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

Blackbook Recruitment is seeking a Cloud Security Engineer to own AWS security across a complex multi-account environment in East Melbourne. You will design and maintain security controls, work with software teams to embed security in the development lifecycle and drive DevSecOps practices.

The role focuses on cloud and application security, with hands-on responsibilities implementing guardrails, IAM, GuardDuty, Security Hub and more, while enabling secure CI/CD pipelines and threat modelling.

Qualifications

• 5+ years in Cloud Security, Application Security, DevSecOps or similar role.
• Hands-on AWS security across multi-account environments.
• Experience with IAM, GuardDuty, Security Hub, WAF, Cognito and AWS Organizations.
• Strong understanding of application security, OWASP, secure code review and SAST/DAST tooling.
• Experience securing multi-account AWS environments.
• Infrastructure as Code using CloudFormation, AWS SAM or similar.
• Integrating security into CI/CD pipelines using GitHub Actions, GitLab CI or similar.
• Working knowledge of Python, Go or Rust.

Responsibilities

• Own and mature the AWS security environment across a multi-account setup.
• Design and implement AWS security guardrails, policies and compliance controls.
• Manage AWS security services including IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito, SCPs and Inspector.
• Conduct security assessments, threat modelling and vulnerability analysis across cloud and application environments.
• Work closely with software engineers on secure code reviews and vulnerability remediation.
• Embed SAST, DAST, dependency and container scanning into CI/CD pipelines.
• Implement security controls as code using CloudFormation and/or AWS SAM.
• Support secure AWS IoT Core integration between cloud and edge-based systems.
• Contribute to network security architecture across VPC, Transit Gateway, VPN and Route53.
• Support security incidents, investigations and remediation activities.
• Drive DevSecOps practices and security awareness across engineering teams.
• Continuously improve security monitoring, detection and the organisation's overall security posture.

Skills

AWS security

Application security

DevSecOps

CI/CD pipelines

SAST/DAST

Threat modelling

Security auditing

Python/Go/Rust

Tools

CloudFormation

AWS SAM

GitHub Actions

GitLab CI

Job description

Blackbook Recruitment is seeking a Cloud Security Engineer to own AWS security across a complex multi-account environment in East Melbourne. You will design and maintain security controls, work with software teams to embed security in the development lifecycle and drive DevSecOps practices.

The role focuses on cloud and application security, with hands-on responsibilities implementing guardrails, IAM, GuardDuty, Security Hub and more, while enabling secure CI/CD pipelines and threat modelling.