AWS Cloud Security Engineer — Melbourne Relocation | DevSecOps

Blackbook Executive; Wellington; On-site; NZD 173,000 - 234,000; Full time

Job summary

Blackbook Executive in Wellington is seeking a hands‑on Cloud Security Engineer to take ownership of AWS security across a complex multi‑account environment. The role is based in Melbourne with relocation, and you’ll work closely with software teams to embed security throughout the development lifecycle.

You will design and implement guardrails, manage IAM, GuardDuty, Security Hub, WAF and IoT core integration, and drive DevSecOps practices across engineering.

Qualifications

• 5+ years of Cloud Security / DevSecOps or similar engineering‑focused security role.
• Strong hands‑on experience with AWS security services.
• Experience with IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito and AWS Organizations.
• Experience securing multi‑account AWS environments.
• IaC with CloudFormation or AWS SAM.
• CI/CD integration using GitHub Actions or GitLab CI.
• Proficiency in Python, Go or Rust.
• Understanding of AWS networking (VPC, Transit Gateway, VPN, Route53).
• Threat modelling, security assessments or compliance frameworks.

Responsibilities

• Own and mature the AWS security across a multi-account setup.
• Design and implement AWS security guardrails, policies and compliance controls.
• Manage AWS security services including IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito, SCPs and Inspector.
• Conduct security assessments, threat modelling and vulnerability analysis across cloud and application environments.
• Collaborate with software engineers on secure code reviews and remediation.
• Embed SAST, DAST, dependency and container scanning into CI/CD pipelines.
• Implement security controls as code using CloudFormation and/or AWS SAM.
• Support secure AWS IoT Core integration between cloud and edge‑based systems.
• Contribute to network security architecture across VPC, Transit Gateway, VPN and Route53.
• Support security incidents, investigations and remediation activities.
• Drive DevSecOps practices and security awareness across teams.
• Continuously improve security monitoring and the organisation’s posture.

Skills

AWS Security

DevSecOps

Security Engineering

Threat modelling

Secure code review

Tools

IAM

GuardDuty

Security Hub

WAF

Cognito

CloudFormation

AWS SAM

GitHub Actions

GitLab CI

Job description

Blackbook Executive in Wellington is seeking a hands‑on Cloud Security Engineer to take ownership of AWS security across a complex multi‑account environment. The role is based in Melbourne with relocation, and you’ll work closely with software teams to embed security throughout the development lifecycle.

You will design and implement guardrails, manage IAM, GuardDuty, Security Hub, WAF and IoT core integration, and drive DevSecOps practices across engineering.