Cloud Security Engineer

Blackbook Recruitment; City of Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

Blackbook Recruitment seeks a hands-on Cloud Security Engineer to own AWS security across a complex, multi-account environment and collaborate with software engineers to embed security in the development lifecycle.

You will design and maintain AWS security controls, drive DevSecOps and influence security practices across the engineering team in a fast-paced environment in Melbourne.

Qualifications

• 5+ years' experience in Cloud Security, Application Security, DevSecOps or a similar engineering-focused security role.
• Strong hands-on experience across AWS security services.
• Experience with IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito and AWS Organizations.
• Strong understanding of application security, OWASP, secure code review and SAST/DAST tooling.
• Experience securing multi-account AWS environments.
• Experience with Infrastructure as Code using CloudFormation, AWS SAM or similar.
• Experience integrating security into CI/CD pipelines using GitHub Actions, GitLab CI or similar.
• Working knowledge of Python, Go or Rust.
• Understanding of AWS networking including VPC, Transit Gateway, VPN and Route53.
• Experience with threat modelling, security assessments or security compliance frameworks.
• AWS IoT Core experience will be highly regarded.
• AWS Security Specialty, CISSP, OSCP or similar certification will be highly regarded.

Responsibilities

• Own and mature the AWS security environment across a multi-account setup.
• Design and implement AWS security guardrails, policies and compliance controls.
• Manage AWS security services including IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito, SCPs and Inspector.
• Conduct security assessments, threat modelling and vulnerability analysis across cloud and application environments.
• Work closely with software engineers on secure code reviews and vulnerability remediation.
• Embed SAST, DAST, dependency and container scanning into CI/CD pipelines.
• Implement security controls as code using CloudFormation and/or AWS SAM.
• Support secure AWS IoT Core integration between cloud and edge-based systems.
• Contribute to network security architecture across VPC, Transit Gateway, VPN and Route53.
• Support security incidents, investigations and remediation activities.
• Drive DevSecOps practices and security awareness across engineering teams.
• Continuously improve security monitoring, detection and the organisation's overall security posture.

Skills

AWS security

DevSecOps

Cloud architecture

Threat modelling

CI/CD security

Python

Go

Rust

Security reviews

Tools

CloudFormation

AWS SAM

GitHub Actions

GitLab CI

GuardDuty

Security Hub

WAF

Job description

Secure a complex AWS environment, driving cloud security, DevSecOps, and application security across a growing engineering team.

The Opportunity

An exciting opportunity has become available for a Cloud Security Engineer to take ownership of AWS security across a complex, multi-account cloud environment. You'll be the first dedicated security hire within the business.

Role

You will be responsible for designing, implementing and maintaining AWS security controls while working closely with software engineering teams to embed security throughout the development lifecycle.

This is a hands‑on engineering position suited to someone who enjoys getting into the detail of cloud security, application security and DevSecOps, while also having the opportunity to shape security practices across the wider engineering team.

Key Responsibilities

• Own and mature the AWS security environment across a multi-account setup.
• Design and implement AWS security guardrails, policies and compliance controls.
• Manage AWS security services including IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito, SCPs and Inspector.
• Conduct security assessments, threat modelling and vulnerability analysis across cloud and application environments.
• Work closely with software engineers on secure code reviews and vulnerability remediation.
• Embed SAST, DAST, dependency and container scanning into CI/CD pipelines.
• Implement security controls as code using CloudFormation and/or AWS SAM.
• Support secure AWS IoT Core integration between cloud and edge-based systems.
• Contribute to network security architecture across VPC, Transit Gateway, VPN and Route53.
• Support security incidents, investigations and remediation activities.
• Drive DevSecOps practices and security awareness across engineering teams.
• Continuously improve security monitoring, detection and the organisation's overall security posture.

About You

We're looking for a hands‑on Security Engineer with strong AWS experience, ideally coming from an internal engineering or product environment where you've had ownership of cloud security and worked closely with software development teams.

• 5+ years' experience in Cloud Security, Application Security, DevSecOps or a similar engineering-focused security role.
• Strong hands‑on experience across AWS security services.
• Experience with IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito and AWS Organizations.
• Strong understanding of application security, OWASP, secure code review and SAST/DAST tooling.
• Experience securing multi‑account AWS environments.
• Experience with Infrastructure as Code using CloudFormation, AWS SAM or similar.
• Experience integrating security into CI/CD pipelines using GitHub Actions, GitLab CI or similar.
• Working knowledge of Python, Go or Rust.
• Understanding of AWS networking including VPC, Transit Gateway, VPN and Route53.
• Experience with threat modelling, security assessments or security compliance frameworks.
• AWS IoT Core experience will be highly regarded.
• AWS Security Specialty, CISSP, OSCP or similar certification will be highly regarded.

What's on Offer

• Permanent, full-time opportunity.
• Take ownership of AWS security across a growing engineering environment.
• Work directly with software engineering teams to embed DevSecOps and application security practices.
• Opportunity to shape security architecture, processes and engineering standards.
• Work across complex cloud and edge‑based technology.
• Join a fast‑paced engineering environment where you can have a genuine impact.