Security Engineer: AWS Cloud Migration & Guardrails

Version 1; Birmingham; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Quarterly profit share scheme

Career progression & leadership Path

Flexible/remote working

Pension

Private healthcare

Life assurance

AWS/Microsoft/Oracle/Red Hat training

Annual Excellence Awards

Job summary

Version 1 is seeking a hands-on Security Engineer to embed within a large-scale cloud migration programme migrating workloads to AWS. You will design, automate, and enforce security controls to ensure a secure, compliant posture across the migration lifecycle.

You will work on cloud security architecture, infrastructure-as-code, and Python automation, collaborating with migration, platform, and application teams to unblock security issues and accelerate delivery.

Qualifications

• 4+ years in security engineering, cloud security, or infrastructure security (adjust to seniority).
• Demonstrable hands-on experience securing production AWS environments.
• Proven experience delivering or securing a cloud migration programme.
• Strong scripting/automation ability in Python.
• Experience with IaC (Terraform and/or CloudFormation) in a production setting.
• Comfortable working in a GitLab-based DevSecOps workflow.
• Solid understanding of security frameworks and compliance standards.

Responsibilities

• Define and implement the security controls, guardrails, and landing zone baseline for workloads migrating to AWS.
• Design and operate AWS-native security tooling across accounts and Organizations.
• Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems.
• Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption.
• Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates.
• Assess the security posture of workloads before, during, and after migration; identify and remediate misconfigurations and vulnerabilities.
• Design secure network segmentation and connectivity between source environments and AWS (Direct Connect / VPN, Transit Gateway, security groups, NACLs).
• Implement IAM least-privilege models, identity federation, and secrets management for migrated workloads.
• Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy.
• Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence.
• Partner with migration, platform, and application teams to unblock security issues without slowing delivery.
• Contribute to incident detection and response runbooks for the AWS environment.

Skills

AWS Security Hub

GuardDuty

Config

IAM

KMS

WAF

Inspector

CloudTrail

Organizations & SCPs

Secrets Manager

Macie

Control Tower

Tools

Python

Terraform

CloudFormation

GitLab

OPA/Conftest

Checkov

tfsec

Job description

Version 1 is seeking a hands-on Security Engineer to embed within a large-scale cloud migration programme migrating workloads to AWS. You will design, automate, and enforce security controls to ensure a secure, compliant posture across the migration lifecycle.

You will work on cloud security architecture, infrastructure-as-code, and Python automation, collaborating with migration, platform, and application teams to unblock security issues and accelerate delivery.