{"id":970749,"url":"https://alion.io/job/rest-cloud-security-engineer-ctem","title":"Cloud Security Engineer - CTEM","company":{"id":695623,"name":"Rest","domain":"rest.com.au","url":"https://alion.io/company/rest-5","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-09-16T12:09:09Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-11-03T21:09:00Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"We’ve been around since 1988, and today we’re one of Australia’s largest profit-to-member super funds.\nThat means everything we do is focused on delivering better outcomes for our members - not shareholders.\nClosing date: 30th September 2026\nPlease note Rest does not accept speculative resumes from recruitment agencies\nRest will review applications prior to the closing date and may close the role earlier \n Work in an inclusive and purpose-led organisation helping Australians achieve a better retirement\nStrengthen security across Rest's AWS cloud platforms and services\n12 Month Fixed Term Contract -Sydney CBD Located with hybrid working\nAt Rest, we help more than 2 million Australians to build a better financial future. With around $112 billion in funds under management, we focus on delivering strong long-term outcomes for our members - from their first job through to retirement*. Your best at Rest means focusing on what matters, being trusted to get on with it, and knowing your work genuinely makes a difference. That’s how we operate every day, guided by our values: Be Daring, Keep It Simple, Take Action and Have Grit.\nJoin us as an Cloud Security Engineer - CTEM on a 12 Month Fixed Term Contract. This is your opportunity to make a real contribution to the financial wellbeing of millions of Australians.\nAbout the Role\nYou will provide domain-aligned cloud security support across AWS platforms and workload teams, prioritised by security risk, remediation demand and delivery priorities. Own and deliver remediation of cloud security findings while identifying recurring risks and defining preventative controls, guardrails and secure platform patterns to reduce future exposure.\nAccountabilities/Responsibilities\nDeliver hands-on remediation of prioritised cloud vulnerabilities, misconfigurations, identity risks and control gaps identified through security tooling and the vulnerability management process.\nCoordinate remediation changes with Cloud Platform Services and workload owners, validating implementation and effective closure in line with risk and delivery priorities.\nAutomate repeatable remediation and control validation, and strengthen cloud infrastructure CI/CD through secure pipeline templates, CloudFormation validation, secrets protection, approval controls and security quality gates.\nIdentify systemic risks and define new or enhanced controls, guardrails and secure platform patterns, documenting requirements, implementation options and expected risk reduction.\nSupport effective cloud security operations through relevant telemetry, incident response, standards, playbooks and audit evidence.\nLead cloud security risk exemptions by assessing residual risk, documenting business justification and compensating controls, coordinating approvals, and monitoring exemptions through review or expiry.\n Experience, skills and qualifications\nStrong AWS engineering and security expertise across IAM, network security, encryption, secrets management, logging and workload protection.\nDemonstrated Python scripting capability using AWS APIs to automate remediation and control validation.\nPractical experience with Git, CNAPP/CSPM, AWS Control Tower or equivalent, SIEM integration and vulnerability management.\nExperience engineering secure CI/CD pipelines for cloud infrastructure, including GitHub Actions or equivalent workflow controls, automated testing, secrets management, approval controls and deployment guardrails.\nMandatory CloudFormation experience; experience with Sceptre, GCP and Azure is desirable.\nPractical knowledge of NIST, ISO 27001, ASD Essential Eight and APRA CPS 234; a relevant AWS security certification is desirable.\n .What you'll find at Rest\nHybrid working\n5 Rest Days (wellbeing days) each year in addition to annual leave\nEligible employees are entitled to 22 weeks paid parental leave (gender neutral)\nContinued super contributions during parental leave\nLearning and development opportunities, including AI & Data Academy, leadership programs, LinkedIn Learning, study assistance and professional memberships\nIncome Protection Insurance\nOption to purchase additional leave\nRecognition through our Rest Excellence Awards\nIf you share our values and this sounds like the kind of place you’d do your best work, we’d like to hear from you. Apply now.\nRest is committed to creating a flexible work environment and culture that embraces diversity, equity, and inclusion - where people feel welcome, safe to be themselves and inspired to do their best.\nWe value the different backgrounds, lived experiences and abilities our diverse team brings. We welcome and encourage applications from candidates of all ages, cultural backgrounds, faiths, gender identities, sexual orientations and thinking styles. This includes people with disability, neurodiverse individuals, Aboriginal & Torres Strait Islander peoples and those with disrupted work history due to career or other breaks.\nWe welcome applications from all candidates. To be considered, you will need the right to work in Australia.\n*Funds under management as at 30 June 2026. Rest is recognised as a superannuation leader across a range of areas including performance, responsible investment and member value. Find out more at https://rest.com.au/why-rest/awards.","description_format":"text","description_chars":5286,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Equity","Flexible schedule","Hybrid work","Parental leave"],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Pension & Sovereign Wealth Funds"],"lifecycle":[{"event":"open","at":"2026-09-16T17:43:46Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.399,"p_room":0.35,"age_days":47,"expected_fill_days":15,"reasons":["conf:3","velocity","win:tail"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/rest-cloud-security-engineer-ctem","json_url":"https://alion.io/job/rest-cloud-security-engineer-ctem.json","meta":{"generated_at":"2026-11-03T22:48:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1424,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":695623},"rest":"https://alion.io/mcp/rest/get_company?id=695623"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frest-cloud-security-engineer-ctem"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frest-cloud-security-engineer-ctem"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frest-cloud-security-engineer-ctem"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rest-cloud-security-engineer-ctem\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frest-cloud-security-engineer-ctem"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":970749}},{"tool":"search_jobs","arguments":{"company":"rest.com.au","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":970749},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}