Senior Cloud Security Engineer

BMP Technologies; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

BMP Technologies is seeking a Senior Cloud Security Engineer to design, develop and support cloud and edge security solutions for enterprise applications and APIs. You will work with application developers, architects and security teams to implement security automation, improve controls and troubleshoot security events.

You will design and validate security solutions across the delivery lifecycle, integrating telemetry with SIEM and monitoring platforms, and documenting configurations and

Qualifications

• Experience in cloud security within enterprise environments.
• Hands-on with Cloudflare WAF, Workers and bot management.
• Development skills in JavaScript/TypeScript and Python or PowerShell.
• Strong understanding of APIs, web protocols and security controls.

Responsibilities

• Design, implement and maintain Cloudflare security services (WAF, bot protection, rate limiting, API security).
• Develop Cloudflare Workers for secure request handling and custom controls.
• Build security tooling and automation using JavaScript/TypeScript and Python.
• Tune WAF rules, investigate threats and collaborate with infra and app teams.
• Integrate security telemetry with SIEM and monitoring platforms.

Skills

Cloud security

Application security

Cloudflare WAF

JavaScript/TypeScript

Python

APIs security (REST/GraphQL)

Web protocols (HTTP/S, TLS)

SIEM / observability

Documentation & collaboration

Education

Bachelor's degree in IT/CS/C cybersecurity

Tools

Cloudflare WAF

Cloudflare Workers

TypeScript

Python

PowerShell

Job description

Company: BMP Tec One PtY Ltd
Location: Sydney, NSW
Employment type: Full Time

Senior Cloud Security Engineer - Cloudflare, WAF & API Security

Company: BMP Tec One PtY Ltd
Location: Sydney, NSW
Employment type: Full Time

Key selling points

• Deliver hands-on cloud and application security engineering.
• Build security tooling using Cloudflare Workers, JavaScript and Python.
• Collaborate with enterprise application, infrastructure and security teams.

About BMP Technologies

BMP Technologies provides technology consulting and delivery services to clients across Australia and New Zealand, supported by onshore and offshore teams. Our capabilities include cloud engineering, cybersecurity, software development, DevSecOps and managed services.

About the role

We are seeking a Senior Cloud Security Engineer to design, develop, implement and support cloud and edge security solutions.

Working closely with application developers, architects and infrastructure teams, you will protect enterprise applications and APIs, develop security automation and improve the effectiveness of security controls. This role combines hands-on engineering with troubleshooting, technical documentation and stakeholder collaboration.

Key responsibilities

• Design, implement and maintain Cloudflare security services, including WAF, bot protection, rate limiting and API security.
• Develop and support Cloudflare Workers for secure request handling, proxy services and custom security controls.
• Build and integrate security applications, diagnostic tools and automation using JavaScript, TypeScript or Python.
• Configure and tune managed and custom WAF rules to mitigate threats while reducing false positives.
• Implement and support Zero Trust access controls in collaboration with identity and infrastructure teams.
• Analyse application traffic, security logs and API behaviour to investigate threats and resolve security issues.
• Test and validate security controls before deployment, including regression testing, rollback planning and operational verification.
• Integrate security telemetry with SIEM and monitoring platforms.
• Collaborate with developers to remediate vulnerabilities and strengthen application and API security.
• Maintain technical designs, configuration documentation, deployment procedures and operational runbooks.
• Support incident investigation, service resilience and continuous improvement.

Essential skills and experience

• Demonstrated experience in cloud security, application security or cybersecurity engineering within enterprise environments.
• Strong hands-on experience with Cloudflare WAF, Workers, bot management and rate limiting.
• Practical development experience with JavaScript or TypeScript and scripting or automation skills in Python or PowerShell.
• Strong understanding of HTTP/S, DNS, TLS, reverse proxies, CDN architecture and web application traffic.
• Experience securing REST or GraphQL APIs, including authentication, authorisation and abuse prevention.
• Experience tuning WAF policies and investigating OWASP-related application threats.
• Ability to design, implement, test and support security solutions across the delivery lifecycle.
• Experience analysing security events using SIEM or observability platforms.
• Strong troubleshooting, documentation and stakeholder communication skills.
• Relevant qualifications in information technology, computer science or cybersecurity, or equivalent practical experience.

Desirable experience

• Cloudflare Access, Gateway, Tunnel, D1 or Workers KV.
• Akamai, F5 Advanced WAF/ASM, Imperva or comparable security platforms.
• AWS, Azure or Google Cloud security.
• Infrastructure as code, CI/CD and automated security testing.
• Kubernetes and container security.
• Familiarity with PCI DSS, ISO 27001 or SOC 2 control requirements.
• Relevant cloud, networking or cybersecurity certifications.

BMP Technologies welcomes applications from people of all backgrounds and values an inclusive workplace.