Lead Cloud Security Engineer (DevSecOps)

Bilue; Philippines; On-site; PHP 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Flexible hours

Learning library access

Certification support

Performance coaching

Job summary

Bilue is a digital consultancy delivering AI-enabled technology for Australia's top brands. The Lead Cloud Security Engineer will own the security, compliance and operational integrity of AWS and Azure platforms for client workloads.

This hands-on, technical lead role focuses on building secure pipelines, triaging alerts, managing IAM, secret rotation, ISO 27001 evidence and responsible AI use, with no direct reports.

Qualifications

• Extensive hands-on cloud security experience across AWS and Azure.
• Experience operating production workloads in DevSecOps or platform engineering.
• Proficient in security tooling andIaC (Terraform) with secure CI/CD pipelines.
• Issues root-cause analysis and remediation across stacks.

Responsibilities

• Operate and secure AWS and Azure infrastructure and CI/CD pipelines.
• Triages security alerts and leads remediation and post-incident reviews.
• Manage IAM, secrets and key rotation with least-privilege controls.
• Maintain ISO 27001 controls, evidence and audit readiness.
• Integrate security into build/deploy processes and review code changes.

Skills

AWS

Azure

DevSecOps

Terraform

Incident response

Code review

Tools

GuardDuty

Security Hub

IAM

KMS

CloudTrail

Defender for Cloud

Entra ID

Key Vault

Azure Policy

Job description

• Full-time

Company Description

Bilue is a digital consultancy that designs and builds smart, user-friendly technology for some of Australia’s most well-known businesses. From mobile apps to beautifully designed web platforms and digital experiences, we create solutions that drive impact and deliver exceptional customer outcomes.

Our culture is people-first and purpose-driven. We are a down-to-earth, values-led team with offices in Sydney and Melbourne, and a growing presence in Manila. We genuinely enjoy working together, whether we are solving tough tech problems, brainstorming creative solutions, or grabbing a coffee between meetings. Curiosity is encouraged. Collaboration is second nature.

We value excellence, not ego, and back each other to do great work without micromanagement. With low politics and high trust, it is a place where delivery people, designers, and engineers genuinely connect. Everyone has a voice, the space to grow and have a little fun along the way.

Job Description

As a Lead Cloud Security Engineer at Bilue, you own the security, compliance and operational integrity of the AWS and Azure platforms we run for our clients, including their AI workloads.

You will run the infrastructure, harden the pipelines, take the alerts our SOC partner escalates through to closure, and keep our ISO 27001 evidence audit ready.This is a hands-on role inside the codebase, working alongside our engineers rather than reviewing their work from a distance. This role is a technical lead, but there are no people management responsibilities and you will have no direct reports.

RESPONSIBILITIES

Operate and maintain AWS and Azure infrastructure, CI/CD pipelines, infrastructure as code and environment configuration across client platforms

Triage security alerts escalated by our third party SOC, drive each one through to remediation and closure, and lead the post incident review

Monitor security posture and manage vulnerability remediation across the infrastructure and application layers, including patching and dependency updates

Review pull requests alongside the development team and embed security controls into build and deployment processes in line with agreed policies

Manage identity, access controls, secrets and API credentials across both clouds, including key rotation and least privilege reviews

Maintain observability, alerting, backup and disaster recovery capability, and run regular recovery and restoration testing

Maintain infrastructure and security compliance to ISO 27001, covering configuration standards, logging, audit evidence and closure of control gaps

Use AI responsibly and in line with Bilue's AI policies, treating it as a tool to work smarter while keeping human judgement at the centre of your decisions

WHAT WE'RE LOOKING FOR

Mindset & Experience

Real craft in your work, you build the security gate rather than only switching on the scanner, and you care that a fix actually holds

A consultative approach, you can explain a risk and its trade offs to a client or an engineer without hiding behind jargon

A passion for connection, you share what you find and lift the security knowledge of the whole team rather than keeping it to yourself

Ownership and accountability, happy to be the security escalation point and to take an alert through to closure without being chased

A drive to shape solutions, curious enough to trace a dependency alert through to real exploitability in the codebase and then work with developers on the fix

Technical Skills

Strong hands on experience operating production workloads across both AWS and Azure in a cloud security, DevSecOps or platform engineering role

Cloud security services in production. GuardDuty, Security Hub, IAM, KMS and CloudTrail on the AWS side, or Defender for Cloud, Entra ID, Key Vault and Azure Policy on the Azure side

Confident writing and reviewing Terraform or equivalent infrastructure as code

Able to read application code, raise security issues at the code level, and understand how APIs, services and databases fit together in a running platform

Able to diagnose faults across the stack and run root cause analysis, tracing a vulnerability from a dependency alert through to real exploitability, then working with developers on the fix

CI/CD pipeline experience, including building the security gates rather than only configuring a scanner

Practical security alert triage and incident response alongside an external SOC or MSSP

Working knowledge of ISO 27001 controls and audit evidence

AWS Security Specialty, AZ-500 or an equivalent certification

Nice to Have

A background in platform or backend delivery, with experience building and shipping systems rather than only securing them

Additional Information

LIFE AT BILUE

• Connection that counts
  From monthly Anchor Days and team lunches to our annual offsite, we create intentional moments to connect, collaborate, and celebrate. These are not just fun perks. They are part of how we work and grow together.
• Flexibility that works
  We offer flexible hours, aligned with AEST so you can collaborate with the wider team. It gives you the space to do your best work while staying genuinely connected.
• Strong internal communities
  We actively foster internal communities across tech, design, delivery, AI and beyond, giving you plenty of chances to connect, share knowledge, and learn from your peers.
• Opportunities to grow
  We invest in your development with unlimited access to our learning library, partnership networks and certification pathways, plus support from our internal performance coach. Whether you want to deepen your technical skills or grow your leadership potential, we will back you.
• Flat structure, real impact
  At Bilue, everyone's voice matters. Our leadership team is hands-on and approachable, and we operate without unnecessary layers. We keep things open and transparent, and your ideas will be heard, no matter your title.