Senior AWS Cloud Security Engineer — DevSecOps Lead (Relocation)

Blackbook Executive; Whau; On-site; NZD 173,000 - 222,000; Full time

Job summary

Blackbook Executive is seeking a hands-on Cloud Security Engineer to own AWS security across a multi-account environment. You will design guardrails, implement IAM, GuardDuty, Security Hub, and WAF while collaborating with engineering teams to embed security into the development lifecycle.

You will drive DevSecOps practices, threat modelling, and secure coding reviews, with experience in IaC, CI/CD tooling, and cross-team security improvements across edge and cloud architectures.

Qualifications

• 5+ years in Cloud/Security engineering.
• Strong hands-on AWS security service experience.
• Experience securing multi-account AWS environments.

Responsibilities

• Own and mature AWS security across a multi-account setup.
• Design and implement AWS security guardrails, policies and compliance controls.
• Manage AWS security services including IAM, Identity Center, GuardDuty, Security Hub, WAF, Cognito and related services.
• Embed SAST/DAST and container scanning into CI/CD pipelines.
• Conduct security assessments, threat modelling and vulnerability analysis.

Skills

AWS security

DevSecOps

Secure code review

Threat modelling

CI/CD tooling

Python/Go/Rust

IAM/GuardDuty

VPC networking

Tools

CloudFormation

AWS SAM

GitHub Actions

GitLab CI

Job description

Blackbook Executive is seeking a hands-on Cloud Security Engineer to own AWS security across a multi-account environment. You will design guardrails, implement IAM, GuardDuty, Security Hub, and WAF while collaborating with engineering teams to embed security into the development lifecycle.

You will drive DevSecOps practices, threat modelling, and secure coding reviews, with experience in IaC, CI/CD tooling, and cross-team security improvements across edge and cloud architectures.