Cloud Security Engineer – Tooling & AI-Driven SecOps

relx; New Jersey; On-site; USD 93,000 - 149,000; Full time

Benefits offered by this job

Annual incentive bonus

Country-specific benefits

Job summary

Elsevier's Security Engineering team leads the design, build, and operation of security tooling at scale across the cloud estate. You will own architecture decisions for platforms, guide engineers through reviews, and act as a trusted voice with Incident Response, Threat Engineering, and GRC.

This senior role focuses on hands-on cloud security, secure-by-default practices, and delivering production-ready systems on time and within budget.

Qualifications

• Significant hands-on experience in security engineering designing and operating cloud-native platforms at production scale.
• Ownership of security architecture in AWS with multi-account, cross-region considerations.
• Advanced scripting and software development skills (Python) including APIs and cronjobs.
• Experience building and operating production services on Kubernetes/EKS.
• Experience with AI-assisted engineering tools and secure-by-design practices.

Responsibilities

• Lead design, architecture, and delivery of security platforms and services.
• Own and evolve Infrastructure as Code standards (Terraform) and CI/CD (GitHub Actions).
• Provide technical leadership and mentorship to junior and mid-level engineers.
• Drive integration, tuning, and lifecycle management of core security tooling.
• Collaborate with Incident Response, Threat Engineering, and GRC to translate threats into solutions.
• Promote AI-assisted engineering to improve velocity, quality, and coverage.

Skills

Security engineering

Cloud security

Architecture ownership

Mentoring

Python scripting

DevOps practices

Agile methods

Code review

Incident response collaboration

Tools

Terraform

GitHub Actions

Kubernetes/EKS

Job description

Elsevier's Security Engineering team leads the design, build, and operation of security tooling at scale across the cloud estate. You will own architecture decisions for platforms, guide engineers through reviews, and act as a trusted voice with Incident Response, Threat Engineering, and GRC.

This senior role focuses on hands-on cloud security, secure-by-default practices, and delivering production-ready systems on time and within budget.