Cloud Security Engineer

Overview:

The Cloud Security Engineer is responsible for strengthening cloud and hybrid infrastructure security through governance, risk management, architecture assurance, and continuous improvement of detection and response capabilities.

Responsibilities:

• Develop, document, and maintain cloud security policies, standards, and procedures aligned with regulatory expectations and organizational risk appetite.
• Design and enhance risk assessment methodologies and security frameworks to ensure consistent evaluation and treatment of risks across cloud and enterprise environments.
• Conduct architecture reviews and threat modelling for new and existing systems to identify design-level security risks and recommend mitigations.
• Perform risk assessments and produce clear, actionable reports with prioritized remediation plans tailored to business impact and compliance requirements.
• Review and tune detection rules, correlation logic, and security policies to improve alert quality, reduce false positives, and enhance detection effectiveness.
• Collaborate with Security Engineering and SOC teams to continuously improve monitoring, detection, and response capabilities through iterative feedback loops.

Requirements:

• 5-7 years of experience in cloud security across AWS, Azure, or GCP in enterprise environments.
• Good understanding of security architecture, infrastructure design, IAM, encryption, logging, and cloud-native security controls.
• Experience in risk assessment methodologies, security frameworks, and enterprise risk management practices.
• Familiarity with threat modelling techniques and identifying design-level vulnerabilities.
• Hands-on experience with SIEM tools, detection rules, correlation logic, and alert tuning.
• Ability to translate technical security risks into clear, prioritised remediation actions and risk-based reports.
• Strong analytical skills with the ability to assess complex systems and prioritise risks effectively.
• Experience in financial services, government, or similarly regulated industries is preferred.
• Certifications such as CISSP, CISM, or cloud security certifications are advantageous.