We're looking for a hands-on, Cloud Security Engineer to strengthen the security of our clients AWS platforms.
You'll work alongside platform and application teams, fixing the highest-risk issues first and shaping the guardrails that stop the same problems coming back.
What you'll be doing
Fixing cloud security issues directly, including vulnerabilities, misconfigurations, risky identity setups and control gaps raised through security tooling and the vulnerability management process
Working with the cloud platform team and workload owners to roll out changes, then confirming each fix has been applied properly and the finding is genuinely closed
Automating recurring fixes and control checks, and hardening the infrastructure delivery pipeline with secure pipeline templates, CloudFormation validation, secrets protection, approval steps and security gates
Spotting patterns behind repeat findings, then designing stronger controls, guardrails and secure platform patterns, and writing up the requirements, the options and the risk reduction you expect
Supporting day-to-day security operations through telemetry, incident response, standards, playbooks and audit




Owning the exemption process for cloud security risks: assessing the remaining risk, recording the business reason and compensating controls, getting sign-off, and tracking each exemption until it is reviewed or expires
What you'll bring
Deep AWS security and engineering knowledge across identity and access management, network security, encryption, secrets management, logging and workload protection
Python scripting skills, using AWS APIs to automate fixes and check that controls are working
Hands-on experience with Git, CNAPP/CSPM tools, AWS Control Tower (or similar), SIEM integration and vulnerability management
Experience building secure CI/CD pipelines for cloud infrastructure, including GitHub Actions or a comparable tool, automated testing, secrets handling, approval controls and deployment guardrails
CloudFormation experience (essential)
Working knowledge of NIST, ISO *****, the ASD Essential Eight and APRA CPS 234
Nice to have
Sceptre, GCP and Azure experience
A relevant AWS security certification
Valuable luck!!
#J-*****-Ljbffr

📌 Cloud Security Engineer (Sydney)
🏢 Hydrogen Group
📍 Sydney