Cloud Security Engineer

NTT DATA, Inc.; Sydney; On-site; AUD 170,000 - 230,000; Full time

Job summary

NTT DATA, Inc. in Sydney seeks an experienced Cloud Security Engineer to drive security across a cloud transformation program.

You will embed security into cloud-native architectures, CI/CD pipelines, and operational practices, collaborating with Cloud Engineering, Platform, Development and Cyber Security teams. The role emphasizes hands-on security in Azure and Google Cloud, threat modelling, automation, and secure guardrails to support enterprise-scale delivery.

Qualifications

• 7+ years in Cyber Security or Cloud Security roles.
• Hands-on experience securing Azure and/or GCP environments.
• Experience embedding security into modern CI/CD pipelines.
• Knowledge of container security and Kubernetes.
• Understanding of cloud-native security architectures and controls.

Responsibilities

• Design, implement, and maintain security controls across Azure and GCP environments.
• Support secure cloud infrastructure through IaC practices.
• Implement and optimize cloud-native security services and monitoring capabilities.
• Conduct cloud security reviews, risk assessments, and threat modelling.
• Develop security architectures aligned with Zero Trust principles.
• Integrate security controls into CI/CD pipelines and software delivery processes.
• Implement automated security testing (SAST, DAST, SCA, container scanning, secrets detection).
• Partner with engineering teams to drive shift-left security initiatives.
• Establish automated security guardrails and governance controls.
• Identify and remediate vulnerabilities across cloud workloads and apps.
• Assist with security assessments, pen testing, and incident response.

Skills

Cloud security

DevSecOps

Security architecture

IAM and RBAC

Threat modelling

Security automation

CI/CD security

Tools

Azure

GCP

Kubernetes

Terraform

Python

Job description

About the Role

We are seeking an experienced Cloud Security Engineer to join a high-profile cloud transformation program with a leading enterprise organization based in Sydney.

This is an exciting opportunity for a hands‑on security professional with strong Cloud Security and DevSecOps expertise to help design, implement, and continuously improve security controls across modern cloud environments.

Working closely with Cloud Engineering, Platform, Development, and Cyber Security teams, you will play a key role in embedding security into cloud-native architectures, CI/CD pipelines, and operational practices while supporting the organization’s broader cloud transformation journey.

Key Responsibilities

• Design, implement, and maintain security controls across Azure and GCP environments.
• Support secure cloud infrastructure through Infrastructure as Code (IaC) practices.
• Implement and optimize cloud-native security services and monitoring capabilities.
• Conduct cloud security reviews, risk assessments, and threat modelling activities.
• Develop security architectures aligned with Zero Trust principles.

DevSecOps

• Integrate security controls into CI/CD pipelines and software delivery processes.
• Implement automated security testing including SAST, DAST, SCA, container scanning, and secrets detection.
• Partner with engineering teams to drive shift‑left security initiatives.
• Establish automated security guardrails and governance controls.

Security Operations & Risk Management

• Identify, assess, and remediate vulnerabilities across cloud workloads and applications.
• Support security assessments, penetration testing, and remediation activities.
• Assist with security incident investigations and response activities.
• Contribute to continuous improvements in security posture and compliance.

Identity & Access Management

• Implement and maintain IAM controls, RBAC frameworks, and least‑privilege models.
• Support cloud encryption, key management, and data protection initiatives.
• Ensure security controls align with organizational and regulatory requirements.

Security Automation

• Develop and maintain security automation using Python, PowerShell, Bash, or similar technologies.
• Build compliance monitoring, reporting, and security dashboard solutions.
• Integrate security tooling with SIEM and SOC environments.

About You

To be successful in this role, you will bring:

• 7+ years' experience in Cyber Security, Cloud Security, DevSecOps, or Security Engineering.
• Strong hands‑on experience securing Azure and/or GCP environments.
• Proven experience embedding security controls into modern CI/CD pipelines.
• Experience with container and Kubernetes security.
• Strong understanding of cloud‑native security architectures and controls.
• Knowledge of Zero Trust, NIST CSF, CIS Benchmarks, and security best practices.
• Experience working within Agile and DevOps environments.
• Excellent stakeholder engagement and communication skills.
• A practical, solutions‑focused approach to security.

Highly Regarded

• Microsoft Azure Security Engineer Associate (AZ‑500)
• Google Professional Cloud Security Engineer Certification
• Terraform or other Infrastructure as Code experience
• Enterprise cloud migration or transformation program experience
• Security operations, SIEM, and SOC integration experience
• Experience within regulated industries such as Financial Services, Utilities, Government, or Retail