Senior Cloud Security Engineer

About the role

DevOps builds it; you make sure it's secure and can prove it. You'll be hands-on — reviewing Terraform PRs for security gaps, building automated drift detection, writing SIEM rules, and owning the credential lifecycle. When the CTO asks, "Are we secure?" you pull up a dashboard, not a slide deck. You own the security posture of the infrastructure from shaping how access and controls are modelled, to verifying they hold in practice.

What you'll do

• Verify that infra implementations match the security model — continuously, not quarterly
• Build automated compliance checks and drift detection (AWS Config, Steampipe, custom tooling, whatever works)
• Review Terraform PRs for IAM, SCP, and network security gaps before they hit production
• Own credential lifecycle: rotation, PAM, JIT access, session recording
• Write and tune detection rules in OpenSearch SIEM

What you need

• Cloud security
• SIEM
• IAM
• Splunk
• AWS
• Terraform

Good to have

• Network security
• Elasticsearch