AWS Cloud Security Engineer — Offensive Defender

Swisscom; Netherlands; On-site; EUR 65,000 - 72,000; Full time

Benefits offered by this job

Relocation support

Phone/internet allowance

Health insurance contribution

Home office allowance

Gym subscription

Vacation days 25

Job summary

Swisscom seeks an AWS Platform Security Engineer to think like an attacker and build like an engineer, strengthening our internal cloud platform. You will own hands-on security assessments, drive remediation, and advise platform teams to bake security into the design from the ground up.

You will collaborate with DevOps and product owners, apply offensive security tools, and contribute to hardened cloud controls across Swisscom’s internal AWS Landing Zone.

Qualifications

• Bachelor’s degree in Computer Science or equivalent experience.
• 4+ years of AWS experience with a strong security focus.
• Hands-on penetration testing or red team experience in cloud environments.
• Strong understanding of attack patterns and defensive controls.
• Experience in agile, cross‑functional teams.
• Nice to have OSCP, CRTO or AWS Security Specialty certs.

Responsibilities

• Perform offensive security assessments on AWS platforms and the iAWS Landing Zone.
• Write code, update controls, and drive remediation with engineers.
• Act as security advisor to platform and product teams to enable secure by design.
• Collaborate across multiple teams to embed security across the ICP ART.
• Support SOC processes and refine security workflows within Swisscom.

Skills

AWS security

Penetration testing

Agile teamwork

Python

TypeScript

Cloud security

Red team

Education

B.Sc. in Computer Science

OSCP

AWS Certified Security - Specialty

Tools

Burp Suite

nmap

Metasploit

Pacu

ScoutSuite

Prowler

kube-bench

kube-hunter

Trivy

CloudWatch

CloudTrail

Amazon Inspector

Terraform

CDK

Job description

Swisscom seeks an AWS Platform Security Engineer to think like an attacker and build like an engineer, strengthening our internal cloud platform. You will own hands-on security assessments, drive remediation, and advise platform teams to bake security into the design from the ground up.

You will collaborate with DevOps and product owners, apply offensive security tools, and contribute to hardened cloud controls across Swisscom’s internal AWS Landing Zone.