Cloud Security Engineer (Cloud Security & DevSecOps)

NTT; Sydney; On-site; AUD 150,000 - 200,000; Full time

Job summary

NTT Ltd. is seeking an experienced Cloud Security Engineer to design, implement, and improve security controls across Azure and GCP as part of a large cloud transformation. The role collaborates with Cloud Engineering, Platform, Development, and Cyber Security teams to embed security into cloud-native architectures and CI/CD pipelines.

You will drive secure design, threat modelling, vulnerability management, and security automation across environments, Kubernetes, and related platforms.

Qualifications

• 7+ years in Cyber Security, Cloud Security, or DevSecOps Engineering.
• Hands-on in Microsoft Azure and Google Cloud Platform environments.
• Strong knowledge of cloud-native security architectures and controls.
• Experience integrating security into CI/CD pipelines.
• Strong container and Kubernetes security experience.
• Familiarity with Zero Trust, NIST CSF, CIS Benchmarks.

Responsibilities

• Design and implement security controls across Azure and GCP.
• Develop secure cloud architectures aligned with Zero Trust.
• Implement cloud-native security services (Defender for Cloud, Sentinel, SCC).
• Conduct cloud security assessments and threat modelling.
• Embed security into CI/CD pipelines and development workflows.
• Integrate tooling with GitHub, GitLab, Azure DevOps; automate testing.

Skills

Cloud Security

DevSecOps

Azure

GCP

CI/CD security

Kubernetes security

Zero Trust

Tools

GitHub

GitLab

Azure DevOps

Job description

Sydney, NSW
6-Month Contract with possible extensions

About the Role

We are seeking an experienced Cloud Security Engineer with strong Cloud Security and DevSecOps expertise to join a large-scale cloud transformation program. This role will focus on designing, implementing, and continuously improving security controls across Microsoft Azure and Google Cloud Platform (GCP) environments.

Working closely with Cloud Engineering, Platform, Development, and Cyber Security teams, you will play a key role in embedding security into cloud-native architectures, CI/CD pipelines, and operational practices to enable secure and scalable cloud adoption.

This is an excellent opportunity for a hands-on security professional who is passionate about cloud technologies, automation, and modern security engineering practices.

Key Responsibilities

Cloud Security Engineering

• Design and implement security controls across Azure and GCP environments.
• Develop secure cloud architectures aligned with Zero Trust principles.
• Implement and maintain cloud-native security services including Microsoft Defender for Cloud, Microsoft Sentinel, GCP Security Command Center, Cloud Armor, Cloud IDS, and Identity-Aware Proxy (IAP).
• Conduct cloud security assessments, architecture reviews, and threat modelling activities.

DevSecOps

• Embed security controls into CI/CD pipelines and development workflows.
• Implement automated security testing including SAST, DAST, Software Composition Analysis (SCA), container scanning, and secrets detection.
• Integrate security tooling with GitHub, GitLab, Azure DevOps, and related platforms.
• Champion shift-left security practices and security-by-design principles.

Vulnerability & Threat Management

• Identify, assess, and remediate vulnerabilities across cloud infrastructure, applications, and container platforms.
• Support cloud penetration testing and security assessments.
• Assist with security incident investigations and remediation activities.
• Develop practical remediation strategies for cloud workloads and Kubernetes environments.

Identity & Access Management

• Implement and maintain IAM controls across Azure and GCP.
• Configure RBAC and least-privilege access models.
• Implement encryption, key management, and cloud data protection controls.
• Ensure compliance with organisational security standards and regulatory requirements.

Security Automation

• Develop security automation using Python, PowerShell, Bash, or similar technologies.
• Build automated compliance monitoring and reporting solutions.
• Integrate cloud security tooling with SIEM and SOC platforms.
• Create dashboards and security metrics to support operational reporting.

About You

To be successful in this role, you will have:

• 7+ years' experience in Cyber Security, Cloud Security, or DevSecOps Engineering.
• Hands-on experience securing Microsoft Azure and Google Cloud Platform environments.
• Strong knowledge of cloud-native security architectures and controls.
• Experience integrating security practices into CI/CD pipelines.
• Strong container and Kubernetes security experience.
• Knowledge of Zero Trust principles, NIST Cyber Security Framework, CIS Benchmarks, and industry best practices.
• Experience working within Agile and DevOps environments.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent stakeholder engagement and communication capabilities.

Desirable Qualifications

• Azure Security Engineer Associate (AZ-500)
• Google Professional Cloud Security Engineer Certification
• Experience with cloud migration and enterprise transformation programs.
• Exposure to security operations, SIEM integrations, and SOC environments.
• Experience working within regulated industries such as Financial Services, Government, Utilities, or Retail.

For more information about this or other opportunities, please contact Shrividya Shivashankar. Please quote our job reference number 678598.

About us

NTT Ltd. is a leading global technology services company. Working with organizations around the world, we achieve business outcomes through intelligent technology solutions.For us, intelligent means data driven, connected, digital and secure. As a global ICT provider, we employ more than 40,000 people in a diverse and dynamic workplace that spans 57 countries, trading in 73 countries and delivering services in over 200 countries and regions

NTT is proud to be an equal opportunity employerwith a global culture that embraces diversity. We are committedto providing an environment free of unfair discrimination and harassment.We do not discriminate based on age, race, color, sex, religion, national origin, disability, pregnancy, marital status, sexual orientation, gender reassignment, veteran status, or other protected category.