Senior Cloud Security Engineer

Role Summary

The Cloud Security Engineer is responsible for designing, implementing, and operating security controls that protect Keyloop’s cloud environments and workloads. This role ensures cloud services are securely architected, configured, monitored, and continuously improved in line with business risk, regulatory requirements, and security best practices.

The Cloud Security Engineer works closely with platform, infrastructure, and engineering teams to enable secure cloud adoption at scale, while supporting security operations, incident response, and compliance objectives.

Key Responsibilities

• Cloud Security Architecture & Design
• Define and maintain cloud security architectures, reference designs, and baseline configurations.
• Embed security-by-design principles into cloud platform and workload architectures.
• Support secure adoption of cloud-native, microservices, and event-driven architectures.
• Cloud Security Controls & Tooling
• Implement and operate cloud-native and third-party security tooling, including:
• Cloud Security Posture Management (CSPM)
• Cloud Workload Protection Platforms (CWPP)
• Cloud-native logging, monitoring, and threat detection services
• Define and enforce security guardrails using policy-as-code and automation.
• Ensure secure configuration of networking, storage, compute, and managed services.
• Identity, Access & Data Protection
• Design and support cloud identity and access management (IAM) controls, including least privilege and role-based access.
• Support secure authentication, authorisation, and secrets management practices.
• Ensure data protection controls such as encryption, key management, and data lifecycle controls are correctly implemented.
• Monitoring, Detection & Incident Support
• Ensure cloud security telemetry and audit logs are enabled, accurate, and integrated into SIEM and SOC workflows.
• Investigate cloud-related security alerts, misconfigurations, and incidents.
• Support containment, remediation, and recovery actions during cloud security incidents.
• Contribute to post-incident reviews and preventative control improvements.
• Risk Assessment & Assurance
• Conduct cloud security risk assessments, architecture reviews, and threat modelling exercises.
• Identify and prioritise cloud security risks based on business impact and likelihood.
• Support compliance and assurance initiatives, including NIST, ISO/IEC 27001, and SOC 2.
• Provide evidence and documentation to support audits and security assessments.
• Collaboration & Enablement
• Partner with cloud platform and engineering teams to embed security controls into delivery processes.
• Act as a cloud security subject matter expert for projects and initiatives.
• Communicate cloud security risks and recommendations clearly to technical and non-technical stakeholders.
• Continuous Improvement
• Monitor emerging cloud security threats, vulnerabilities, and technology trends.
• Continuously improve cloud security posture, automation, and operational efficiency.
• Contribute to the maturity of Keyloop’s overall security engineering capability.

Required experience & skillsets

• 5+ years of experience in cloud security, cloud engineering, or security engineering roles.
• Strong hands-on experience with at least one major cloud platform (AWS, Azure).
• Practical experience implementing cloud security controls and monitoring solutions.
• Solid understanding of shared responsibility models and cloud-native architectures.
• Technical Skills
• Cloud security architecture and design
• Identity and access management
• Cloud-native security tooling and automation
• Security monitoring and incident response