(Senior) AWS Cloud Security Engineer d/f/m

RWE AG; Swindon; On-site; GBP 85,000 - 115,000; Full time

Benefits offered by this job

Performance bonuses

Retirement plans

Job summary

RWE Supply & Trading GmbH in Swindon, UK is seeking an experienced AWS Cloud Security Engineer to secure, evolve and operate the AWS platform used by RWEST and related teams. The role focuses on embedding security into cloud foundations, reference patterns and platform services.

You will implement secure IaC, review architectures, and drive vulnerability management and security automation in a fast-paced, collaborative environment.

Qualifications

• Strong hands-on experience securing and operating AWS environments at scale with cloud-native controls.
• Knowledge of Infrastructure as Code (Terraform) and CI/CD pipelines with security integration.
• Awareness of SDLC practices, threat modelling, and security automation.

Responsibilities

• Design, implement, and improve security controls for AWS platform services.
• Translate security requirements into reusable platform patterns and guardrails.
• Review AWS architectures and configurations to identify weaknesses and provide pragmatic remediations.
• Implement and improve AWS security monitoring, logging and alerting for incidents.
• Support incident response readiness with observability, evidence collection and runbooks.
• Collaborate with application teams, platform engineers and security stakeholders to embed security from the start.

Skills

AWS security

Terraform

CI/CD

DevSecOps

Threat modelling

Security architecture

Authentication & authorization

Communication

AI-assisted security tools

Education

Cyber security degree

Tools

AWS Security Services

Job description

Select how often (in days) to receive an alert: Create Alert

Location(s):

Swindon, Wiltshire, GB, SN5 6PB Essen, NW, DE, 45141

RWE Supply & Trading GmbH
To start as soon as possible, full time / part time, permanent

Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer. You will help secure, evolve and operate the AWS platform that teams across RWE Supply and Traiding GmbH (RWEST)rely on to build and run business-critical applications. Working closely with platform engineers, application teams and security specialists, you will embed security into our cloud foundations, operating model and shared platform services. We value innovation, collaboration, and continuous improvement.

As an AWS Cloud Security Engineer, you will act as a bridge between application delivery, and security departments. Your focus will be to ensure that AWS services, platform patterns, infrastructure as code, CI/CD pipelines, identity and access controls, monitoring, and security tooling are designed and operated securely from the start. You will support teams in identifying and remediating risks, integrate security controls into the platform, improve vulnerability and configuration management, and help shape secure cloud practices that are practical, scalable, and aligned with RWEST’s Security Engineer pathway.

About the role

• Design, implement, and improve security controls for AWS platform services.
• Translate security requirements into reusable platform patterns, guardrails and operational controls that teams can adopt consistently.
• Review AWS architectures, permissions, configuration settings and deployment approaches to identify weaknesses and recommend pragmatic remediations.
• Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents.
• Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services.
• Work closely with application teams, platform engineers and security stakeholders to embed security from the start.
  

Job requirements and experience

• Strong hands-on experience securing and operating AWS environments at scale, with a solid understanding of AWS security architecture, shared responsibility principles and cloud-native security controls.
• Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation.
• Knowledge of SSDLC practices and threat modelling.
• Ability to review cloud architectures and technical designs from a security perspective.
• Understanding of authentication and authorization patterns.
• Strong communication and collaboration skills, with the ability to translate security requirements into clear guidance for application teams.
• Curiosity and continuous learning mindset, including interest in AI-assisted security operations, intelligent automation, and responsible use of emerging technologies.

Advantageous, but not essential

• Experience in governing large multi-account AWS environments.
• Relevant professional certifications such as AWS Certified Security – Specialty, AWS Solutions Architect, CISSP, CCSP or comparable qualifications.
• Experience with AWS security services and platform capabilities.
• Familiarity with security frameworks and standards such as CIS Benchmarks, NIST, ISO 27001 or AWS Well-Architected Security Pillar.
• Experience working in a regulated, financial, energy or other business-critical technology environment.
• Experience applying AI-assisted tools safely for code review, vulnerability triage, log analysis, anomaly detection, documentation, or security automation.
• Academic degree in cyber security, computer science, or a comparable field.
• Proficiency in spoken and written German.

RWE is committed to creating a diverse and inclusive environment – we value your passion, your willingness to learn and your desire to thrive. Even if you don't have all the above skills, need flexible working arrangements or other adjustments not yet listed here, we'd love to hear from you.

• Modern company culture with flat hierarchies and strong team spirit.
• Diverse team with opportunities for continuous learning and development.
• Innovative environment in a dynamic, growing energy market.
• High potential DevOps team with strong management support.
• Agile setup working on impactful projects.
• Excellent compensation and benefits package, including retirement plans and performance bonuses.

We look forward to meeting you. Of course, you can find us on LinkedIn, Instagram, Facebook, YouTube and Xing, too. We value diversity and therefore welcome all applications - regardless of gender, disability, nationality, ethnic and social origin, religion/belief, age, sexual orientation, and identity. #inclusionmatters RWE Supply & Trading is our connection to the world’s energy markets. Headquartered in Essen, Germany, the company operates one of Europe’s largest and most advanced energy trading floors. A diverse team of over 2,300 professionals from around 90 countries trades electricity, gas, commodities, and CO2 emission allowances. With precise market analysis and a strong customer focus, we create innovative energy supply solutions and tailored risk management concepts for industrial clients. We also ensure the commercial optimisation of RWE’s power plant portfolio and market the electricity generated by RWE. In addition, legally independent RWE gas storage companies operate in Germany, contributing to a secure energy supply.