Lead AWS Cloud Security Engineer

Solaris; Sweden; Hybrid; SEK 993,158 - 1,324,210; Full time

Benefits offered by this job

Home office budget

Learning budget €1000/year

Competitive salary and bonus program

Meal allowance

Deutschland ticket subsidy

28 vacation days (+2 after 2 years, +3

Work abroad up to 12 weeks/year

Job summary

Solaris is seeking an experienced Cloud Security Engineer to audit and refactor AWS resources into secure Terraform code, while designing and maintaining robust WAF policies to protect applications and APIs. You will enforce guardrails, guide least-privilege IAM practices, and lead security automation across a multi-account AWS setup, aligning with NIST, CIS, and BaFin requirements.

Ideal candidates bring 5+ years in cloud security, strong Terraform skills, and excellent collaboration with

Qualifications

• Degree in Computer Science, Cloud Computing, Cyber Security, Information Technology, or equivalent professional experience.
• 5+ years of dedicated professional experience in Cloud Security Engineering with a track record securing complex AWS environments.
• Deep hands-on experience with AWS WAF, Shield, and CloudFront for public-facing endpoints.
• Strong Terraform and IaC skills, including auditing templates for security drifts.
• Mastery of AWS native security tools (IAM, KMS, Security Hub, GuardDuty) and multi-account security architectures.
• Experience collaborating with established Cloud Architecture or DevOps teams as a security consultant.

Responsibilities

• Audit current AWS environment with Cloud Architecture and Engineering teams, identify security debt, and plan refactoring into secure Terraform code.
• Design, deploy, tune, and maintain AWS WAF policies and rulesets to protect applications and APIs from OWASP Top 10 attacks, bots, and zero-days.
• Establish cloud security guardrails, multi-account structures, and SCPs in partnership with the infrastructure team.
• Guide IAM strategies toward least privilege and audit legacy roles for security improvements.
• Manage and optimize cloud-native security monitoring tools (Security Hub, GuardDuty, CloudTrail, Inspector, KMS).
• Lead incident response for AWS security alerts, perform cloud forensics, and coordinate containment strategies.
• Ensure compliance with financial regulations, internal policies, and security frameworks (NIST, CIS, BaFin).
• Lead security automations in the AWS environment.
• Understand AWS native AI capabilities (Bedrock or Quick).

Job description

Solaris is seeking an experienced Cloud Security Engineer to audit and refactor AWS resources into secure Terraform code, while designing and maintaining robust WAF policies to protect applications and APIs. You will enforce guardrails, guide least-privilege IAM practices, and lead security automation across a multi-account AWS setup, aligning with NIST, CIS, and BaFin requirements.

Ideal candidates bring 5+ years in cloud security, strong Terraform skills, and excellent collaboration with