Our client is looking for an experienced Cloud Security Engineer to join a large, complex and highly regulated organisation that continually invests in its cyber security capability.
This is a hands-on security engineering role that combines strong technical security skills with practical experience managing security vulnerabilities, exposure and risk across large-scale technology environments.
You will provide domain-aligned cloud security support across the AWS platform and engineering teams, helping identify, prioritise and remediate security risks while partnering closely with engineering, infrastructure, architecture and technology teams.

Key Responsibilities
Manage and improve the organisation's vulnerability and exposure management capability.
Identify, assess and prioritise vulnerabilities across cloud, infrastructure, and applications.
Work with technology teams to drive timely remediation and reduce the organisation's overall security exposure.
Perform security assessments of cloud environments, applications and infrastructure.
Monitor and investigate security weaknesses, misconfigurations and emerging threats.
Provide practical security guidance to engineering and technology teams.




Support security uplift initiatives across a large and complex technology workplace.
Contribute to security standards, controls, processes and technical documentation.
Work closely with Cyber Security, Infrastructure, Cloud, DevOps, Architecture and Application teams.
Assist with security tooling, automation and continuous improvement of security operations.

Skills and experience required.
Solid background in AWS cloud engineering and knowledge across IAM, Network Security and workload protection.
Robust background in Python scripting, using AWS APIs to automate remediation and controls.
Solid background in SIEM integration, vulnerability, and exposure management.
Background in creating CI/CD pipelines for cloud infrastructure [GitHub Actions].
Robust background in CloudFormation, with knowledge of Sceptre, Azure and/or GCP - highly desirable.
Knowledge of NIST, ISO 27001, Essential Eight, APRA CPS 234 + any relevant AWS security certifications - highly desirable.
Strong collaboration and business engagement skills.

If you have the requested skills and experience required, then please apply NOW to @novon.com.au

📌 Cloud Security Engineer Vulnerability Management Sydney
🏢 Novon On Demand
📍 Sydney