(Senior) AWS Cloud Security Engineer d/f/m

RWE; Essen; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Retirement plans

Performance bonuses

Flexible working arrangements

Flat hierarchies

Zusammenfassung

RWE Supply & Trading GmbH is seeking an experienced AWS Cloud Security Engineer to secure, evolve and operate the AWS platform used across RWEST. You will embed security into platform services, CI/CD pipelines and infrastructure as code, collaborating with platform engineers, application teams and security specialists.

Responsibilities include designing security controls, enabling reusable guardrails, reviewing cloud architectures for weaknesses, and improving monitoring, incident response and

Qualifikationen

• Strong hands-on experience securing and operating AWS environments at scale.
• Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation.
• Knowledge of SDLC and threat modelling.
• Ability to review cloud architectures and designs from a security perspective.
• Understanding of authentication and authorization patterns.
• Excellent communication to guide application teams.
• Curiosity for AI-assisted security operations and automation.

Aufgaben

• Design, implement, and improve security controls for AWS platform services.
• Translate security requirements into reusable platform patterns and guardrails.
• Review AWS architectures, permissions, and deployment approaches for weaknesses.
• Improve AWS security monitoring, logging and alerting.
• Enhance incident response readiness with observability and playbooks.
• Collaborate with application teams and security stakeholders to embed security from the start.

Kenntnisse

AWS security architecture

Infrastructure as Code

Terraform

CI/CD pipelines

DevSecOps

Threat modelling

Authentication & authorization

German language

Multi-account AWS environments

Tools

Terraform

AWS security services

Jobbeschreibung

RWE Supply & Trading GmbH To start as soon as possible, full time / part time, permanent

Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer. You will help secure, evolve and operate the AWS platform that teams across RWE Supply and Traiding GmbH (RWEST)rely on to build and run business-critical applications. Working closely with platform engineers, application teams and security specialists, you will embed security into our cloud foundations, operating model and shared platform services. We value innovation, collaboration, and continuous improvement.

As an AWS Cloud Security Engineer, you will act as a bridge between application delivery, and security departments. Your focus will be to ensure that AWS services, platform patterns, infrastructure as code, CI/CD pipelines, identity and access controls, monitoring, and security tooling are designed and operated securely from the start. You will support teams in identifying and remediating risks, integrate security controls into the platform, improve vulnerability and configuration management, and help shape secure cloud practices that are practical, scalable, and aligned with RWEST’s Security Engineer pathway.

About the role

• Design, implement, and improve security controls for AWS platform services.
• Translate security requirements into reusable platform patterns, guardrails and operational controls that teams can adopt consistently.
• Review AWS architectures, permissions, configuration settings and deployment approaches to identify weaknesses and recommend pragmatic remediations.
• Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents.
• Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services.
• Work closely with application teams, platform engineers and security stakeholders to embed security from the start.

Job requirements and experience

• Strong hands-on experience securing and operating AWS environments at scale, with a solid understanding of AWS security architecture, shared responsibility principles and cloud-native security controls.
• Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation.
• Knowledge of SSDLC practices and threat modelling.
• Ability to review cloud architectures and technical designs from a security perspective.
• Understanding of authentication and authorization patterns.
• Strong communication and collaboration skills, with the ability to translate security requirements into clear guidance for application teams.
• Curiosity and continuous learning mindset, including interest in AI-assisted security operations, intelligent automation, and responsible use of emerging technologies.

Advantageous, but not essential

• Experience in governing large multi-account AWS environments.
• Relevant professional certifications such as AWS Certified Security – Specialty, AWS Solutions Architect, CISSP, CCSP or comparable qualifications.
• Experience with AWS security services and platform capabilities.
• Familiarity with security frameworks and standards such as CIS Benchmarks, NIST, ISO 27001 or AWS Well-Architected Security Pillar.
• Experience working in a regulated, financial, energy or other business-critical technology environment.
• Experience applying AI-assisted tools safely for code review, vulnerability triage, log analysis, anomaly detection, documentation, or security automation.
• Academic degree in cyber security, computer science, or a comparable field.
• Proficiency in spoken and written German.

RWE is committed to creating a diverse and inclusive environment – we value your passion, your willingness to learn and your desire to thrive. Even if you don't have all the above skills, need flexible working arrangements or other adjustments not yet listed here, we'd love to hear from you.

Your benefits

• Modern company culture with flat hierarchies and strong team spirit.
• Diverse team with opportunities for continuous learning and development.
• Innovative environment in a dynamic, growing energy market.
• High potential DevOps team with strong management support.
• Agile setup working on impactful projects.
• Excellent compensation and benefits package, including retirement plans and performance bonuses.

We value diversity and therefore welcome all applications - regardless of gender, disability, nationality, ethnic and social origin, religion/belief, age, sexual orientation, and identity. #inclusionmatters

RWE Supply & Trading is our connection to the world’s energy markets. Headquartered in Essen, Germany, the company operates one of Europe’s largest and most advanced energy trading floors. A diverse team of over 2,300 professionals from around 90 countries trades electricity, gas, commodities, and CO2 emission allowances. With precise market analysis and a strong customer focus, we create innovative energy supply solutions and tailored risk management concepts for industrial clients.

We also ensure the commercial optimisation of RWE’s power plant portfolio and market the electricity generated by RWE. In addition, legally independent RWE gas storage companies operate in Germany, contributing to a secure energy supply.