[Hiring] Senior Cloud Security Engineer @Employment Hero

Role Description

The Cloud Security Engineer is responsible for securing our AWS environment, with a strong focus on automation, AI-assisted workflows, and scalable security controls. This role is not just about fixing issues, but about building intelligent systems that continuously detect, prioritise, and remediate cloud risks with minimal manual effort.

• Cloud Security Engineering
  • Remediate cloud risks across IAM, network exposure, encryption, and workloads
  • Design and implement secure-by-default patterns across AWS (IAM guardrails, network segmentation, least privilege)
  • Partner with SRE and Engineering to embed security into infrastructure and deployments
• AI-Driven Detection & Response
  • Leverage AI tools to triage, prioritise, and investigate cloud security findings
  • Build workflows that correlate signals from cloud logs, EDR, and third-party tools into actionable insights
  • Continuously improve detection coverage using AI-assisted analysis
• DevSecOps & Automation
  • Build automated security checks into CI/CD (IaC scanning, dependency risk, secrets detection)
  • Use AI to accelerate vulnerability triage and remediation workflows
  • Reduce manual security effort through scripting, automation, and intelligent tooling
• Security Data & Intelligence
  • Integrate and analyse data from sources such as SBOMs, vulnerability feeds, and threat intelligence
  • Use AI to identify patterns, emerging risks, and prioritisation signals across large datasets
  • Contribute to internal “security data platform” initiatives

Qualifications

• Strong experience securing AWS environments
• Solid understanding of IAM, networking, logging, and cloud-native architectures
• Experience with infrastructure-as-code (e.g. Terraform) and CI/CD pipelines
• Ability to script and automate (Python, Bash, or similar)
• Familiarity with SBOM, supply chain security, and dependency risk management
• Experience using or integrating AI tools in engineering or security workflows
• Familiarity with securing AWS Services such as CloudFront, RDS, Kafka and OpenSearch
• Knowledge of patch management across AWS compute platforms

Requirements

• Experience with tools like AWS Security Hub, GuardDuty, Wiz, or Datadog
• Experience building internal tools or automation platforms

Benefits

• You will work remotely, with the flexibility to own your time and impact
• You will access cutting-edge tools to amplify your work, knowledge and outputs
• You’ll surround yourself with ambitious, outcome-driven colleagues who challenge you to do the best work of your life
• You’ll own ESOP (employee share options) in one of the world’s fastest-growing tech companies
• You’ll also have access to a wide range of benefits that includes:
  • A very generous parental leave policy
  • Subsidised egg freezing (so you can make the choice that’s right for you, on your terms)
  • A WFH office expense budget
  • Outstanding learning & development opportunities