Job Description

About the Role n

We are seeking an experienced Cloud Security Engineer to join a high-profile cloud transformation program with a leading enterprise organization based in Sydney.

n

This is an exciting opportunity for a hands‑on security professional with strong Cloud Security and DevSecOps expertise to help design, implement, and continuously improve security controls across modern cloud environments.

n

Working closely with Cloud Engineering, Platform, Development, and Cyber Security teams, you will play a key role in embedding security into cloud-native architectures, CI/CD pipelines, and operational practices while supporting the organization’s broader cloud transformation journey.

Key Responsibilities n

n
- Design, implement, and maintain security controls across Azure and GCP environments.
n
- Support secure cloud infrastructure through Infrastructure as Code (IaC) practices.
n
- Implement and optimize cloud-native security services and monitoring capabilities.
n
- Conduct cloud security reviews, risk assessments, and threat modelling activities.
n
- Develop security architectures aligned with Zero Trust principles.
n

DevSecOps nn
- Integrate security controls into CI/CD pipelines and software delivery processes.
n
- Implement automated security testing including SAST, DAST, SCA, container scanning, and secrets detection.
n
- Partner with engineering teams to drive shift‑left security initiatives.
n
- Establish automated security guardrails and governance controls.
n

Security Operations & Risk Management nn
- Identify, assess, and remediate vulnerabilities across cloud workloads and applications.
n
- Support security assessments, penetration testing, and remediation activities.
n
- Assist with security incident investigations and response activities.
n




- Contribute to continuous improvements in security posture and compliance.
n

Identity & Access Management nn
- Implement and maintain IAM controls, RBAC frameworks, and least‑privilege models.
n
- Support cloud encryption, key management, and data protection initiatives.
n
- Ensure security controls align with organizational and regulatory requirements.
n

Security Automation nn
- Develop and maintain security automation using Python, PowerShell, Bash, or similar technologies.
n
- Build compliance monitoring, reporting, and security dashboard solutions.
n
- Integrate security tooling with SIEM and SOC environments.
n

About You n

To be successful in this role, you will bring:

n

n
- 7+ years' experience in Cyber Security, Cloud Security, DevSecOps, or Security Engineering.
n
- Strong hands‑on experience securing Azure and/or GCP environments.
n
- Proven experience embedding security controls into modern CI/CD pipelines.
n
- Experience with container and Kubernetes security.
n
- Solid understanding of cloud‑native security architectures and controls.
n
- Knowledge of Zero Trust, NIST CSF, CIS Benchmarks, and security best practices.
n
- Experience working within Agile and DevOps environments.
n
- Excellent stakeholder engagement and communication skills.
n
- A practical, solutions‑focused approach to security.
n

Highly Regarded nn
- Microsoft Azure Security Engineer Associate (AZ‑500)
n
- Google Professional Cloud Security Engineer Certification
n
- Terraform or other Infrastructure as Code experience
n
- Enterprise cloud migration or transformation program experience
n
- Security operations, SIEM, and SOC integration experience
n
- Experience within regulated industries such as Financial Services, Utilities, Government, or Retail
n

n

#J-18808-Ljbffr

📌 Cloud Security Engineer (New South Wales)
🏢 Ntt Data
📍 New South Wales