Cloud Security Engineer – National Security West

Hackajob Ltd; Leeds; Hybrid; GBP 61,000 - 101,000; Full time

Benefits offered by this job

25 days annual leave

Private medical and dental insurance

Flexible benefits package

Training and certification

Employee share plan

Wellbeing benefits

Annual incentive

Job summary

BAE Systems Digital Intelligence is seeking Cloud Security Engineers to design and operate secure cloud-native SOC capabilities. You will deploy secure AWS architectures, implement automated responses, and guide engineering teams in security best practices.

In this hybrid role, you will use Terraform/CDK, Kubernetes/OpenShift, and SIEM tools to elevate security posture. Qualifications include strong automation, incident response and collaboration with stakeholders.

Qualifications

• Experience across AWS services and security best practices.
• Strong knowledge of IAM and least-privilege controls.
• DevSecOps mindset with CI/CD integration.
• Skills in scripting for automation and troubleshooting.
• Familiarity with infrastructure as code and cloud monitoring.

Responsibilities

• Design, build and maintain secure cloud-native SOC solutions.
• Develop and deploy cloud infra using IaC tools like Terraform, CloudFormation or CDK.
• Implement secure AWS architectures meeting compliance.
• Build monitoring, alerting and automated response across clouds.
• Integrate cloud platforms with SIEM tools (Microsoft Sentinel, Splunk).
• Promote security best practices and support incident investigations.
• Lead deliveries for senior engineers and mentor juniors.

Skills

AWS

DevSecOps

IAM

Python

Bash

Troubleshooting

Automation

Collaboration

Tools

Terraform

CloudFormation

AWS CDK

Kubernetes

OpenShift

Ansible

Puppet

Chef

CloudWatch

Grafana

Prometheus

Splunk

Microsoft Sentinel

Job description

Salary: £61,000 - 101,000 per year

Requirements:

• Skilled in a range of AWS services, with an interest in keeping up to date with releases and best practices.
• Experience with AWS security services and cloud security best practices, including identity, monitoring, threat detection and data protection.
• Understanding of Security Operations, including monitoring, alerting, incident response, threat detection and SIEM platforms such as Microsoft Sentinel or Splunk.
• Strong understanding of Identity and Access Management (IAM), least-privilege access principles and privileged access controls.
• Knowledge of DevSecOps practices and integrating security controls into CI/CD pipelines.
• Experience using Infrastructure as Code tools such as Terraform, CloudFormation or AWS CDK.
• Experience with monitoring and observability tools such as CloudWatch, Grafana or Prometheus.
• Experience with container orchestration platforms such as Kubernetes, Amazon ECS or OpenShift, including container security best practices.
• Understanding of networking principles and their application to software-defined networking in cloud environments.
• Experience using configuration management tools such as Ansible, Puppet or Chef.
• Proficiency in at least one scripting language, such as Python, Bash or Go.
• Excellent troubleshooting, automation and problem-solving skills.
• Collaborative mindset and interest in learning about new technologies and cyber security trends.
• AWS certifications are desirable but not essential; we provide training and certification opportunities.
• Applicants must have the permanent and unrestricted right to live and work in the UK. The successful candidate must undergo Government SC clearance before starting and obtain Developed Vetting after starting.
• Applicants must achieve Baseline Personnel Security Standard. The role may also be subject to further national security vetting and export control restrictions.

Responsibilities:

• Design, build and maintain secure, cloud-native solutions supporting our Security Operations Centre (SOC) capabilities.
• Develop and deploy cloud infrastructure using Infrastructure as Code tools such as Terraform, CloudFormation or AWS CDK.
• Design and implement secure AWS architectures that meet security and compliance requirements.
• Build and maintain security monitoring, alerting and automated response capabilities across cloud environments.
• Integrate cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk.
• Use AWS security services and promote security best practices across engineering and development teams.
• Support incident response investigations, threat hunting and security improvement initiatives.
• Develop reusable implementation patterns, standards and automation to improve consistency and security across projects.
• Manage software configuration, source code repositories and CI/CD pipelines in line with DevSecOps principles.
• Work with internal and external stakeholders to deliver secure, innovative cloud solutions.
• Identify opportunities to use AI and automation to enhance security operations and operational efficiency.
• For Senior Engineers, lead technical delivery, mentor engineers and promote engineering best practices within the team.

Technologies:

• AI
• AWS
• Ansible
• Bash
• CI/CD
• Cloud
• CloudWatch
• DevSecOps
• Grafana
• IAM
• Support
• Kubernetes
• OpenShift
• Prometheus
• Puppet
• Python
• Security
• Splunk
• Terraform

More:

We are BAE Systems Digital Intelligence, home to 4,500 digital, cyber and intelligence experts working collaboratively across 10 countries to help governments, armed forces and businesses understand complex data and unlock digital advantage. We are seeking Cloud Security Engineers to join our Engineering team and support and develop our SOC capabilities. The role is listed in Gloucester, with the posting also identifying Leeds, UK. Our National Security business is growing, and our teams work with clients on impactful solutions while taking part in community engagement and outreach. We offer 25 days of annual leave, flexible and part-time working, a flexible benefits package, private medical and dental insurance, a competitive pension, training and certification opportunities, and a dedicated Career Manager. Other benefits may include an employee share plan, wellbeing and lifestyle benefits, shopping discounts and an annual incentive. We embrace hybrid working, supporting flexibility in where and when colleagues work. We value diversity and inclusion and welcome applicants from all backgrounds.

last updated 40 week of 2026