Cloud Security Engineer Leeds National Security West

Hackajob Ltd; Holbeck; Hybrid; GBP 61,000 - 101,000; Full time

Benefits offered by this job

Hybrid working

25 days holiday

Private medical and dental insurance

Competitive pension scheme

Cycle to work

Job summary

BAE Systems Digital Intelligence in Leeds seeks a Cloud Security Engineer to design, build and secure cloud-native SOC capabilities. You will develop and deploy cloud infrastructure using IaC and design secure AWS architectures aligned with compliance needs.

You will implement security monitoring, alerting and automated responses, integrating SIEM tools such as Microsoft Sentinel or Splunk. The role emphasizes DevSecOps, collaboration and ongoing learning with hybrid working arrangements.

Qualifications

• Proficient in cloud security engineering and AWS services.
• Experience with IAM, least-privilege access, and cloud security best practices.
• Knowledge of SIEM platforms, monitoring and threat detection.
• Familiarity with DevSecOps and CI/CD security controls.
• Hands-on IaC with Terraform, CloudFormation or AWS CDK.

Responsibilities

• Design, build and secure cloud-native SOC capabilities.
• Develop and deploy IaC for secure cloud infrastructure.
• Implement secure AWS architectures meeting compliance needs.
• Build security monitoring, alerting and automated response.
• Integrate cloud platforms with SIEM tools like Microsoft Sentinel or Splunk.
• Promote security best practices across engineering teams.
• Support incident response, threat hunting and security enhancements.
• Develop reusable patterns and automation for consistency.

Skills

Python

Bash

Go

IAM

DevSecOps

CI/CD

Cloud

Security

AI interest

Tools

Terraform

CloudFormation

AWS CDK

Ansible

Puppet

Chef

Kubernetes

OpenShift

CloudWatch

Grafana

Prometheus

Splunk

Microsoft Sentinel

Terraform (IaC)

Job description

Salary: £61,000 - 101,000 per year

Requirements:

• We are looking for talented and versatile Cloud Engineers to join our Engineering team.
• We need someone skilled in a range of AWS services and committed to keeping up to date with the latest releases and best practices.
• We are looking for experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection.
• We need an understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk.
• We are looking for a strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls.
• We need knowledge of DevSecOps practices and integrating security controls into CI/CD pipelines.
• We are looking for experience using Infrastructure as Code, such as Terraform, CloudFormation or AWS CDK.
• We need experience with monitoring and observability tools such as CloudWatch, Grafana or Prometheus.
• We are looking for experience with container orchestration platforms such as Kubernetes, Amazon ECS or OpenShift, including container security best practices.
• We need an understanding of networking principles and how they translate to software-defined networking in cloud environments.
• We are looking for experience using configuration management tools such as Ansible, Puppet or Chef.
• We need proficiency in scripting in at least one language, such as Python, Bash or Go.
• We are looking for a keen interest in AI and emerging cyber security technologies.
• We need excellent troubleshooting, automation and problem-solving skills.
• We are looking for a collaborative mindset with a passion for learning new technologies and cyber security trends.
• AWS certifications are desirable but not essential.

Responsibilities:

• We design, build and maintain secure, cloud-native solutions to support our Security Operations Centre (SOC) capabilities.
• We develop and deploy cloud infrastructure using Infrastructure as Code (Terraform, CloudFormation or AWS CDK).
• We design and implement secure AWS architectures that align with security and compliance requirements.
• We build and maintain security monitoring, alerting and automated response capabilities across cloud environments.
• We integrate cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk.
• We leverage AWS security services and promote security best practices across engineering and development teams.
• We support incident response investigations, threat hunting activities and security improvement initiatives.
• We develop reusable implementation patterns, standards and automation to improve consistency and security across projects.
• We manage software configuration, source code repositories and CI/CD pipelines in line with DevSecOps principles.
• We work closely with internal and external stakeholders to deliver secure and innovative cloud solutions.
• We identify opportunities to leverage AI and automation to enhance security operations and operational efficiency.
• For Senior Engineers, we lead technical delivery, mentor engineers and drive engineering best practices within the team.

Technologies:

• AI
• AWS
• Ansible
• Bash
• CI/CD
• Cloud
• CloudWatch
• DevSecOps
• Grafana
• IAM
• Support
• Kubernetes
• OpenShift
• Prometheus
• Puppetli>
• Python
• Security
• Splunk
• Terraform

More:

We are BAE Systems Digital Intelligence, home to 4,500 digital, cyber and intelligence experts working collaboratively across 10 countries to collect, connect and understand complex data so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in demanding environments. This Cloud Security Engineer role is based in Leeds and sits within our Engineering team, supporting our Security Operations Centre capabilities. We offer hybrid working, 25 days holiday, flexible hours, private medical and dental insurance, a competitive pension scheme, cycle to work, taste cards, training and certification opportunities, and a dedicated Career Manager. We also support community engagement and outreach activities to help build tech and cyber skills in the region. We value diversity, inclusion and a culture where people can make a real difference, and we welcome candidates from all backgrounds.

last updated 38 week of 2026