Strategic Cloud Security Engineer – AWS & DevSecOps

Michael Page; City of Melbourne; On-site; AUD 150,000 - 200,000; Full time

Job summary

Michael Page is seeking an experienced security professional to lead cloud and application security across AWS multi-account environments in a full-time, office-based role in Scoresby, VIC. You will own the security stack, conduct threat modelling, and drive secure SDLC practices with engineering teams.

The role emphasizes hands-on AWS security expertise, IaC with CloudFormation/SAM, and strong collaboration across DevOps and software teams to raise security posture and incident response

Qualifications

• 5+ years' experience in Cloud Security, Application Security, or DevSecOps.
• Experience securing AWS multi-account environments.
• Infrastructure as Code using CloudFormation and/or AWS SAM.
• Security integration within GitHub Actions and/or GitLab CI pipelines.
• Strong hands-on AWS security expertise including: IAM, Identity Center, Security Hub, GuardDuty, WAF, Cognito, AWS Organizations & SCPs.

Responsibilities

• Design, implement, and maintain security guardrails, policies, and compliance controls across multi-account AWS environments.
• Own and mature our AWS security stack, including Identity Center, Security Hub, GuardDuty, WAF, Cognito, IAM, and SCPs.
• Conduct security assessments, threat modelling, and vulnerability analysis across cloud and application environments.
• Partner with software engineering teams to embed application security practices into the SDLC, including secure code review and remediation guidance.
• Support secure AWS IoT Core integration for edge device communication and data flows.

Skills

Cloud Security

Application Security

DevSecOps

Threat Modelling

SAST/DAST

Security in SDLC

Networking Security

Python

Golang

Rust

Tools

CloudFormation

AWS SAM

Identity Center

GuardDuty

Security Hub

WAF

IAM

SAST/DAST tools

GitHub Actions

GitLab CI

Job description

Michael Page is seeking an experienced security professional to lead cloud and application security across AWS multi-account environments in a full-time, office-based role in Scoresby, VIC. You will own the security stack, conduct threat modelling, and drive secure SDLC practices with engineering teams.

The role emphasizes hands-on AWS security expertise, IaC with CloudFormation/SAM, and strong collaboration across DevOps and software teams to raise security posture and incident response