Senior Security Cloud Engineer

Role Overview

We are seeking a highly technical and experienced Senior Security Engineer - Cloud and Infrastructure to

strengthen security across IC’s Group cloud platforms, infrastructure and technology services.

The successful candidate will bring deep hands-on AWS expertise, strong systems, networking and

infrastructure security knowledge, and an automation mindset. They will lead cloud security architecture reviews,

engineer security controls, automate security processes and work directly with technology teams to resolve

complex security risks.

This is a senior individual contributor role with significant technical ownership. The primary focus is AWS

security, infrastructure and automation, complemented by vulnerability management, SOC improvement,

incident investigation, and application and API security assessments.

Key Responsibilities

Cloud Security, Architecture and Engineering

• Lead security architecture reviews for new systems, significant changes and existing AWS, on-premises and

hybrid environments.

• Design, implement and validate AWS security controls across identity and access management, networking,

compute, storage, encryption, secrets management and logging.

• Strengthen security across AWS accounts through organisational policies, service control policies, secure

account structures and centralised security monitoring.

• Identify and remediate excessive permissions, exposed resources, insecure configurations and attack paths

across cloud environments.

• Assess and improve container, Kubernetes and Amazon EKS security, including workload identities, network

access and runtime controls.

• Review network architectures and security controls, including segmentation, routing, firewalls, VPNs and

connectivity between cloud and on-premises environments.

• Optimise AWS WAF rules and policies using traffic analysis and security findings to strengthen protection and

minimise false positives.

• Work closely with Cloud and Infrastructure and Platform Engineering teams to embed security into infrastructure

design, deployment and operation.

• Define reusable security architectures, hardening standards and secure configuration patterns, and verify their

effectiveness through technical testing.

Key Responsibilities continued

Automation, AI and Technical Leadership

• Apply an automation mindset to security engineering, replacing repetitive manual activities with reliable, reusable

workflows.

• Use Terraform and Ansible to embed security controls into infrastructure provisioning, configuration

management and remediation.

• Develop scripts and API integrations to automate security checks, vulnerability validation, evidence collection

and reporting.

• Integrate infrastructure-as-code scanning, policy validation and security checks into CI/CD pipelines.
• Design automation with appropriate testing, exception handling, approval controls and rollback capabilities.
• Apply AI-assisted tools to security analysis, investigation and engineering tasks, independently validating outputs

and protecting sensitive information.

• Assess security risks introduced by AI services and integrations, including data exposure, prompt injection and

excessive permissions.

• Mentor engineers, guide technical decisions and communicate security priorities clearly to technology teams and

management.

Vulnerability Management and Risk Analysis

• Drive vulnerability management across cloud platforms and supporting infrastructure, from discovery and

validation through remediation and verified closure.

• Prioritise findings using exploitability, exposure, asset criticality, attack paths and potential business impact.
• Work with technology owners to agree remediation actions and timelines, escalating overdue or material risks.
• Conduct technical risk assessments and explain treatment options, compensating controls and residual risk.
• Analyse recurring findings and address their underlying causes through improvements to architecture,

infrastructure code and configuration standards.

SOC Engineering and Incident Investigation

• Improve security telemetry, SIEM detections and investigation workflows across AWS, identity and infrastructure

environments.

• Investigate and respond to SIEM and Cloud Native Application Protection Platform (CNAPP) alerts, coordinate

remediation, and fine-tune detection rules, policies and thresholds to improve alert quality and reduce false

positives.

• Ensure relevant cloud activity and security events are captured, centralised and available for investigation.
• Develop and tune detections for suspicious access, privilege escalation, configuration changes and other

relevant attack techniques.

• Automate alert enrichment, investigation and response activities with appropriate approval controls.
• Provide senior technical expertise during complex cloud and infrastructure investigations, supporting

containment and recovery.

• Validate detection coverage through controlled testing and translate incident findings into stronger preventive

and detective controls.

Security Assessments and Penetration Testing

• Conduct end-to-end security assessments and penetration testing across AWS environments, infrastructure,

web applications and APIs, from scoping through reporting and retesting.

• Identify exploitable misconfigurations, authentication and authorisation weaknesses, privilege escalation

opportunities and attack paths across applications and cloud services.

• Combine architecture and configuration reviews with hands-on testing to assess security controls and business

impact.

• Document findings with clear evidence and practical remediation guidance, working with Cloud, Development

and Application Security teams to verify fixes.

• Review external assessment findings and coordinate remediation and retesting with relevant technology teams.

Required Experience and Technical Skills

• At least 10 years of relevant professional experience across cybersecurity, cloud security and infrastructure

security, with substantial hands-on engineering responsibility.

• Strong hands-on AWS security and architecture expertise is mandatory, including IAM, AWS Organizations,

service control policies, VPC security, EC2, S3, KMS, secrets management, CloudTrail, GuardDuty, Security

Hub and AWS WAF, including rule optimisation and tuning.

• Demonstrated experience designing and implementing security controls across multi-account AWS

environments.

• Strong understanding of networking and network security is mandatory, including TCP/IP, DNS, routing,

switching, subnetting, firewalls, VPNs, network segmentation and traffic analysis.

• CCNA certification is required as a minimum, or a higher-level relevant networking certification.
• Hands-on experience with Terraform and Ansible, including developing and reviewing infrastructure definitions,

configuration playbooks and automated remediation.

• Strong scripting skills in Python, PowerShell or Bash, with practical experience integrating tools through APIs.
• An automation mindset, demonstrated through projects that improve security consistency, scalability and

operational efficiency.

• Practical experience securing containers, Kubernetes and Amazon EKS, including workload permissions and

runtime controls.

• Experience embedding security checks into infrastructure-as-code and CI/CD workflows.
• Strong knowledge of Windows, Linux, Active Directory and privileged access.
• Experience with vulnerability management, technical risk analysis and verification of remediation.
• Practical experience investigating and responding to SIEM and CNAPP alerts, including tuning detection rules,

policies and thresholds.

• Experience with cloud log analysis, detection engineering and incident investigation.
• Practical penetration testing experience across cloud and infrastructure, with working knowledge of web

application and API testing.

• Understanding of common OWASP vulnerabilities, authentication and authorisation controls, and

application-to-cloud security risks.

• Practical use of AI-assisted tools in security or engineering, with the ability to explain implemented use cases

and validate results.

• Strong technical documentation and English communication skills, with the ability to work independently across

geographically distributed teams.

Desirable Qualifications

• AWS Certified Security - Specialty and/or AWS Certified Solutions Architect - Professional are strongly preferred.
• AWS Certified Solutions Architect - Associate, Terraform Associate or relevant Kubernetes certifications are

advantageous.

• Security certifications such as OSCP, OSEP, GIAC, CISSP or CCSP are advantageous but are not required.
• Experience with cloud security posture management, cloud workload protection and policy-as-code.
• Experience with SOAR platforms, automated incident response or AI-enabled security workflows.
• Experience in financial services, trading platforms, fintech or other business-critical environments.
• Familiarity with CIS Benchmarks, MITRE ATT&CK, OWASP, NIST and ISO 27001.
• Degree in Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent practical

experience.

Personal Attributes

• Strong ownership, independent judgement and accountability for technical outcomes.
• A practical engineering approach with a preference for automation and sustainable solutions.
• An investigative mindset and the ability to challenge assumptions with evidence.
• Sound judgement when introducing changes or testing business-critical environments.
• A collaborative approach that balances security requirements with operational needs.

Demonstrated technical capability, engineering outcomes and practical AWS expertise will carry greater weight

than certifications alone.