Cyber Cloud Platform Security Engineer

Responsibilities

1. Cybersecurity Go-Live Readiness

• Track cybersecurity readiness for new systems, technology refreshes and migrations.
• Review go-live documentation, including risk assessments, system architecture, VAPT reports, hardening evidence and security plans.
• Coordinate with system owners, vendors and IT teams to resolve outstanding security requirements before go-live.
• Monitor post-go-live security actions and escalate unresolved risks.

2. Cloud Security & Access Management

• Administer Azure Role-Based Access Control (RBAC), privileged access and cloud permissions based on approved requests.
• Maintain access records and conduct periodic reviews of temporary or elevated privileges.
• Review AWS and Azure security configurations, including identity management, network security, encryption and access controls.

3. Cloud Security Posture Management (CSPM)

• Monitor cloud security posture and compliance findings using Microsoft Defender for Cloud, AWS Security Hub
• Assess security misconfigurations, vulnerabilities and compliance gaps, including validating findings and false positives.
• Prioritise findings, recommend remediation actions and coordinate with technical teams to resolve issues.
• Track remediation progress, validate closure evidence and escalate critical or overdue findings.

4. Security Compliance & Governance

• Support compliance assessments against government cybersecurity policies and security requirements.
• Assist with risk assessments, security exceptions, audit evidence and remediation tracking.
• Maintain cybersecurity documentation, SOPs, checklists and compliance records.
• Identify opportunities for process improvement and security automation.

5. Reporting & Stakeholder Coordination

• Prepare regular cybersecurity reports covering cloud security posture, go-live readiness, compliance gaps and remediation progress.
• Work closely with system owners, infrastructure teams and vendors.
• Provide technical guidance on AWS/Azure security configurations and vulnerability remediation.

Requirements

• Diploma or Degree in Cybersecurity, Computer Science, IT or a related field.
• Azure Security Engineer Associate (AZ-500) or equivalent certification strongly preferred.
• AWS Security, CISSP, CCSP, CISM or CRISC certifications are advantageous.
• Hands-on experience with Microsoft Azure security administration, including Azure RBAC, Entra ID, Azure Policy and privileged access management.
• Ability to support AWS cloud security configurations.
• Experience with Microsoft Defender for Cloud or equivalent CSPM tools.
• Good understanding of cloud security, IAM, network security, encryption, vulnerability management and compliance.
• Ability to interpret security assessment reports, system architecture diagrams and technical remediation evidence.
• Familiarity with cybersecurity operations, access management, change requests and risk tracking.

Good to have

• Knowledge of AWS Security Hub.
• Experience with Azure Log Analytics, Azure Workbooks or similar reporting tools.
• Exposure to cybersecurity go-live assessments, VAPT, system hardening and risk assessments.
• Scripting or automation experience for security reporting and remediation tracking.