Working within a collaborative, multi-disciplinary team, you will provide technical guidance, conduct security reviews, evaluate new technologies, and build solutions that improve the security posture of a complex AWS platform.
The work is varied and fast-paced, spanning security reviews, proof-of-concept activities, tooling development, operational support, and stakeholder engagement.
Key Responsibilities:
- Provide security consultancy and technical guidance to platform and engineering teams.
- Conduct security assessments and reviews of cloud services, applications, and tooling.
- Design, develop, and maintain security tooling and services using AWS-native and open-source technologies.
- Investigate, evaluate, and prototype new tools and security capabilities.
- Support teams in adopting secure engineering practices and making effective use of platform security services.
- Respond to technical queries and provide expert advice on cloud security matters.
- Contribute to the operation and continuous improvement of CI/CD pipelines and automation capabilities.
- Support and mentor less experienced engineers, helping to build capability across the organisation.
Essential Skills & Experience:
Cloud & Security
- Strong experience securing AWS environments.
- Hands-on knowledge of AWS security services, including:
- GuardDuty
- Security Hub
- AWS Config
- Service Control Policies (SCPs)
- Experience building, managing, and operating cloud infrastructure in AWS.
Automation & Infrastructure
- Strong experience with Infrastructure as Code using Terraform.
- Experience developing and maintaining CI/CD pipelines.
- Knowledge of containerisation technologies, particularly Docker.
- Experience working with version control systems such as Git.
Software Engineering
Strong coding skills in Python.
- Experience writing, testing, troubleshooting, and refactoring code using object-oriented principles.
- Understanding of scripting using Bash.
- Exposure to Golang and/or Java would be advantageous.
Tooling & Technology
Experience with some or all of the following:
- AWS
- Terraform / Terragrunt
- Jenkins
- Docker
- Git
- Bitwarden
- Python
- JSON
- YAML
