Cloud Security Engineer

About the role

In this role, you will work as a hands-on engineer embedded in the client’s cloud security team, operating at the intersection of cloud engineering, security operations, and risk management. You will primarily work with multi-account AWS and GCP environments, operating the client’s CNAPP platform and ensuring it delivers full coverage and reliable visibility across accounts, workloads, and identities. A significant part of the role is building the triage process and driving remediation with engineering teams — not just reporting findings — while over time helping strengthen the overall cloud security posture as the program matures and new capabilities are adopted.

Zakres obowiązków

• Own, configure, and maintain Upwind across AWS and GCP environments, working with cloud engineering teams to ensure full coverage and visibility
• Run day-to-day cloud vulnerability management within the defined program, applying agreed processes and SLAs, and deliver regular reporting
• Prioritise findings based on real business risk and context, such as exposure, data sensitivity, and exploitability, rather than severity scores alone
• Drive remediation with engineering teams through clear, actionable tickets and consistent follow-up
• Improve the overall cloud security posture in line with industry frameworks and best practices

Wymagania

• 5+ years in cloud security or security engineering, with hands-on experience in both AWS and GCP
• Experience with Upwind or a comparable CNAPP/CSPM platform (Wiz.io, Prisma Cloud, Orca)
• Strong understanding of risk-based prioritisation and security posture management
• Knowledge of identity and access management, including AWS IAM, GCP IAM, and Microsoft Entra ID
• Basic understanding of agentic AI architectures and tool use
• Familiarity with cloud security frameworks and benchmarks such as NIST SP 800-53 and CIS AWS and GCP Foundations Benchmarks
• Experience with Terraform and scripting for automation
• Strong communication skills and the ability to work autonomously, fluent English

Tech stack

• Security
• Cloud security
• AI
• AWS
• GCP
• Prisma
• Orca
• Terraform