Cloud Security Engineer

Cloud Security Engineer - Cloud Security & DevSecOps

📍 Sydney, NSW (Hybrid)

📅 6-Month Contract

About the Role

We are seeking an experienced Cloud Security Engineer to join a high-profile cloud transformation program with a leading enterprise organization based in Sydney.

This is an exciting opportunity for a hands-on security professional with strong Cloud Security and DevSecOps expertise to help design, implement, and continuously improve security controls across modern cloud environments.

Working closely with Cloud Engineering, Platform, Development, and Cyber Security teams, you will play a key role in embedding security into cloud-native architectures, CI/CD pipelines, and operational practices while supporting the organization’s broader cloud transformation journey.

Key Responsibilities

Cloud Security

• Design, implement, and maintain security controls across Azure and GCP environments.
• Support secure cloud infrastructure through Infrastructure as Code (IaC) practices.
• Implement and optimize cloud-native security services and monitoring capabilities.
• Conduct cloud security reviews, risk assessments, and threat modelling activities.
• Develop security architectures aligned with Zero Trust principles.

DevSecOps

• Integrate security controls into CI/CD pipelines and software delivery processes.
• Implement automated security testing including SAST, DAST, SCA, container scanning, and secrets detection.
• Partner with engineering teams to drive shift-left security initiatives.
• Establish automated security guardrails and governance controls.

Security Operations & Risk Management

• Identify, assess, and remediate vulnerabilities across cloud workloads and applications.
• Support security assessments, penetration testing, and remediation activities.
• Assist with security incident investigations and response activities.
• Contribute to continuous improvements in security posture and compliance.

Identity & Access Management

• Implement and maintain IAM controls, RBAC frameworks, and least-privilege models.
• Support cloud encryption, key management, and data protection initiatives.
• Ensure security controls align with organizational and regulatory requirements.

Security Automation

• Develop and maintain security automation using Python, PowerShell, Bash, or similar technologies.
• Build compliance monitoring, reporting, and security dashboard solutions.
• Integrate security tooling with SIEM and SOC environments.

About You

To be successful in this role, you will bring:

• 7+ years' experience in Cyber Security, Cloud Security, DevSecOps, or Security Engineering.
• Strong hands-on experience securing Azure and/or GCP environments.
• Proven experience embedding security controls into modern CI/CD pipelines.
• Experience with container and Kubernetes security.
• Strong understanding of cloud-native security architectures and controls.
• Knowledge of Zero Trust, NIST CSF, CIS Benchmarks, and security best practices.
• Experience working within Agile and DevOps environments.
• Excellent stakeholder engagement and communication skills.
• A practical, solutions-focused approach to security.

Highly Regarded

• Microsoft Azure Security Engineer Associate (AZ-500)
• Google Professional Cloud Security Engineer Certification
• Terraform or other Infrastructure as Code experience
• Enterprise cloud migration or transformation program experience
• Security operations, SIEM, and SOC integration experience
• Experience within regulated industries such as Financial Services, Utilities, Government, or Retail