(Senior) AWS Cloud Security Engineer d/f/m

RWE AG; Essen; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Retirement plan

Performance bonuses

Home office / Flexible work

Zusammenfassung

RWE Supply & Trading GmbH is seeking a (Senior) AWS Cloud Security Engineer to secure, evolve and operate the AWS platform used by RWEST. You will collaborate with platform engineers, application teams and security specialists to embed security into cloud foundations and shared services.

The role emphasizes proactive security design, vulnerability management, and secure CI/CD practices. You will design and implement security controls, improve monitoring and incident readiness, and help scale

Qualifikationen

• Strong hands-on experience securing and operating AWS environments at scale.
• Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation.
• Knowledge of SSDLC practices and threat modelling.
• Ability to review cloud architectures and technical designs from a security perspective.
• Understanding of authentication and authorization patterns.
• Strong communication and collaboration skills, with the ability to translate security requirements into clear guidance for application teams.
• Curiosity and continuous learning mindset, including interest in AI-assisted security operations, intelligent automation, and responsible use of emerging technologies.

Aufgaben

• Design, implement, and improve security controls for AWS platform services.
• Translate security requirements into reusable platform patterns, guardrails and operational controls that teams can adopt consistently.
• Review AWS architectures, permissions, configuration settings and deployment approaches to identify weaknesses and recommend pragmatic remediations.
• Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents.
• Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services.
• Work closely with application teams, platform engineers and security stakeholders to embed security from the start.

Kenntnisse

AWS Security

Terraform

CI/CD

DevSecOps

Security Automation

Threat Modelling

Cloud Architecture Review

Authn/Authz

Communication

German language

Ausbildung

Cyber security degree

Tools

Terraform

Jobbeschreibung

To start as soon as possible, full time / part time, permanent.Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer.You will help secure, evolve and operate the AWS platform that t

Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer.You will help secure, evolve and operate the AWS platform that teams across RWE Supply and Traiding GmbH (RWEST) rely on to bui

Homeoffice

RWE Supply & Trading GmbH

To start as soon as possible, full time / part time, permanent

Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer. You will help secure, evolve and operate the AWS platform that teams across RWE Supply and Traiding GmbH (RWEST) rely on to build and run business-critical applications. Working closely with platform engineers, application teams and security specialists, you will embed security into our cloud foundations, operating model and shared platform services. We value innovation, collaboration, and continuous improvement.

As an AWS Cloud Security Engineer, you will act as a bridge between application delivery, and security departments. Your focus will be to ensure that AWS services, platform patterns, infrastructure as code, CI/CD pipelines, identity and access controls, monitoring, and security tooling are designed and operated securely from the start. You will support teams in identifying and remediating risks, integrate security controls into the platform, improve vulnerability and configuration management, and help shape secure cloud practices that are practical, scalable, and aligned with RWEST’s Security Engineer pathway.

About the role

• Design, implement, and improve security controls for AWS platform services.
• Translate security requirements into reusable platform patterns, guardrails and operational controls that teams can adopt consistently.
• Review AWS architectures, permissions, configuration settings and deployment approaches to identify weaknesses and recommend pragmatic remediations.
• Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents.
• Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services.
• Work closely with application teams, platform engineers and security stakeholders to embed security from the start.

Job requirements and experience

• Strong hands-on experience securing and operating AWS environments at scale, with a solid understanding of AWS security architecture, shared responsibility principles and cloud-native security controls.
• Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation.
• Knowledge of SSDLC practices and threat modelling.
• Ability to review cloud architectures and technical designs from a security perspective.
• Understanding of authentication and authorization patterns.
• Strong communication and collaboration skills, with the ability to translate security requirements into clear guidance for application teams.
• Curiosity and continuous learning mindset, including interest in AI-assisted security operations, intelligent automation, and responsible use of emerging technologies.

Advantageous, but not essential

• Experience in governing large multi-account AWS environments.
• Relevant professional certifications such as AWS Certified Security – Specialty, AWS Solutions Architect, CISSP, CCSP or comparable qualifications.
• Experience with AWS security services and platform capabilities.
• Familiarity with security frameworks and standards such as CIS Benchmarks, NIST, ISO 27001 or AWS Well-Architected Security Pillar.
• Experience working in a regulated, financial, energy or other business-critical technology environment.
• Experience applying AI-assisted tools safely for code review, vulnerability triage, log analysis, anomaly detection, documentation, or security automation.
• Academic degree in cyber security, computer science, or a comparable field.
• Proficiency in spoken and written German.

RWE is committed to creating a diverse and inclusive environment – we value your passion, your willingness to learn and your desire to thrive. Even if you don't have all the above skills, need flexible working arrangements or other adjustments not yet listed here, we'd love to hear from you.

• Modern company culture with flat hierarchies and strong team spirit.
• Diverse team with opportunities for continuous learning and development.
• Innovative environment in a dynamic, growing energy market.
• High potential DevOps team with strong management support.
• Agile setup working on impactful projects.
• Excellent compensation and benefits package, including retirement plans and performance bonuses.

We look forward to meeting you. Of course, you can find us on LinkedIn, Instagram, Facebook, YouTube and Xing, too.

We value diversity and therefore welcome all applications - regardless of gender, disability, nationality, ethnic and social origin, religion/belief, age, sexual orientation, and identity. #inclusionmatters

RWE Supply & Trading is our connection to the world’s energy markets. Headquartered in Essen, Germany, the company operates one of Europe’s largest and most advanced energy trading floors. A diverse team of over 2,300 professionals from around 90 countries trades electricity, gas, commodities, and CO2 emission allowances. With precise market analysis and a strong customer focus, we create innovative energy supply solutions and tailored risk management concepts for industrial clients.

We also ensure the commercial optimisation of RWE’s power plant portfolio and market the electricity generated by RWE. In addition, legally independent RWE gas storage companies operate in Germany, contributing to a secure energy supply.