Senior Security Cloud Engineer

Role Overview
We are seeking a highly technical and experienced Senior Security Engineer - Cloud and Infrastructure to
strengthen security across IC’s Group cloud platforms, infrastructure and technology services.
The successful candidate will bring deep hands-on AWS expertise, strong systems, networking and
infrastructure security knowledge, and an automation mindset. They will lead cloud security architecture reviews,
engineer security controls, automate security processes and work directly with technology teams to resolve
complex security risks.
This is a senior individual contributor role with significant technical ownership. The primary focus is AWS
security, infrastructure and automation, complemented by vulnerability management, SOC improvement,
incident investigation, and application and API security assessments.

Key Responsibilities
Cloud Security, Architecture and Engineering
• Lead security architecture reviews for new systems, significant changes and existing AWS, on-premises and
hybrid environments.
• Design, implement and validate AWS security controls across identity and access management, networking,
compute, storage, encryption, secrets management and logging.
• Strengthen security across AWS accounts through organisational policies, service control policies, secure
account structures and centralised security monitoring.
• Identify and remediate excessive permissions, exposed resources, insecure configurations and attack paths
across cloud environments.
• Assess and improve container, Kubernetes and Amazon EKS security, including workload identities, network
access and runtime controls.
• Review network architectures and security controls, including segmentation, routing, firewalls, VPNs and
connectivity between cloud and on-premises environments.
• Optimise AWS WAF rules and policies using traffic analysis and security findings to strengthen protection and
minimise false positives.
• Work closely with Cloud and Infrastructure and Platform Engineering teams to embed security into infrastructure
design, deployment and operation.
• Define reusable security architectures, hardening standards and secure configuration patterns, and verify their
effectiveness through technical testing.

Key Responsibilities continued
Automation, AI and Technical Leadership
• Apply an automation mindset to security engineering, replacing repetitive manual activities with reliable, reusable
workflows.
• Use Terraform and Ansible to embed security controls into infrastructure provisioning, configuration
management and remediation.
• Develop scripts and API integrations to automate security checks, vulnerability validation, evidence collection
and reporting.
• Integrate infrastructure-as-code scanning, policy validation and security checks into CI/CD pipelines.
• Design automation with appropriate testing, exception handling, approval controls and rollback capabilities.
• Apply AI-assisted tools to security analysis, investigation and engineering tasks, independently validating outputs
and protecting sensitive information.
• Assess security risks introduced by AI services and integrations, including data exposure, prompt injection and
excessive permissions.
• Mentor engineers, guide technical decisions and communicate security priorities clearly to technology teams and
management.
Vulnerability Management and Risk Analysis
• Drive vulnerability management across cloud platforms and supporting infrastructure, from discovery and
validation through remediation and verified closure.
• Prioritise findings using exploitability, exposure, asset criticality, attack paths and potential business impact.
• Work with technology owners to agree remediation actions and timelines, escalating overdue or material risks.
• Conduct technical risk assessments and explain treatment options, compensating controls and residual risk.
• Analyse recurring findings and address their underlying causes through improvements to architecture,
infrastructure code and configuration standards.
SOC Engineering and Incident Investigation
• Improve security telemetry, SIEM detections and investigation workflows across AWS, identity and infrastructure
environments.
• Investigate and respond to SIEM and Cloud Native Application Protection Platform (CNAPP) alerts, coordinate
remediation, and fine-tune detection rules, policies and thresholds to improve alert quality and reduce false
positives.
• Ensure relevant cloud activity and security events are captured, centralised and available for investigation.
• Develop and tune detections for suspicious access, privilege escalation, configuration changes and other
relevant attack techniques.
• Automate alert enrichment, investigation and response activities with appropriate approval controls.
• Provide senior technical expertise during complex cloud and infrastructure investigations, supporting
containment and recovery.
• Validate detection coverage through controlled testing and translate incident findings into stronger preventive
and detective controls.

Security Assessments and Penetration Testing
• Conduct end-to-end security assessments and penetration testing across AWS environments, infrastructure,
web applications and APIs, from scoping through reporting and retesting.
• Identify exploitable misconfigurations, authentication and authorisation weaknesses, privilege escalation
opportunities and attack paths across applications and cloud services.
• Combine architecture and configuration reviews with hands-on testing to assess security controls and business
impact.
• Document findings with clear evidence and practical remediation guidance, working with Cloud, Development
and Application Security teams to verify fixes.
• Review external assessment findings and coordinate remediation and retesting with relevant technology teams.
Required Experience and Technical Skills
• At least 10 years of relevant professional experience across cybersecurity, cloud security and infrastructure
security, with substantial hands-on engineering responsibility.
• Strong hands-on AWS security and architecture expertise is mandatory, including IAM, AWS Organizations,
service control policies, VPC security, EC2, S3, KMS, secrets management, CloudTrail, GuardDuty, Security
Hub and AWS WAF, including rule optimisation and tuning.
• Demonstrated experience designing and implementing security controls across multi-account AWS
environments.
• Strong understanding of networking and network security is mandatory, including TCP/IP, DNS, routing,
switching, subnetting, firewalls, VPNs, network segmentation and traffic analysis.
• CCNA certification is required as a minimum, or a higher-level relevant networking certification.
• Hands-on experience with Terraform and Ansible, including developing and reviewing infrastructure definitions,
configuration playbooks and automated remediation.
• Strong scripting skills in Python, PowerShell or Bash, with practical experience integrating tools through APIs.
• An automation mindset, demonstrated through projects that improve security consistency, scalability and
operational efficiency.
• Practical experience securing containers, Kubernetes and Amazon EKS, including workload permissions and
runtime controls.
• Experience embedding security checks into infrastructure-as-code and CI/CD workflows.
• Strong knowledge of Windows, Linux, Active Directory and privileged access.
• Experience with vulnerability management, technical risk analysis and verification of remediation.
• Practical experience investigating and responding to SIEM and CNAPP alerts, including tuning detection rules,
policies and thresholds.
• Experience with cloud log analysis, detection engineering and incident investigation.
• Practical penetration testing experience across cloud and infrastructure, with working knowledge of web
application and API testing.
• Understanding of common OWASP vulnerabilities, authentication and authorisation controls, and
application-to-cloud security risks.
• Practical use of AI-assisted tools in security or engineering, with the ability to explain implemented use cases
and validate results.
• Strong technical documentation and English communication skills, with the ability to work independently across
geographically distributed teams.

Desirable Qualifications
• AWS Certified Security - Specialty and/or AWS Certified Solutions Architect - Professional are strongly preferred.
• AWS Certified Solutions Architect - Associate, Terraform Associate or relevant Kubernetes certifications are
advantageous.
• Security certifications such as OSCP, OSEP, GIAC, CISSP or CCSP are advantageous but are not required.
• Experience with cloud security posture management, cloud workload protection and policy-as-code.
• Experience with SOAR platforms, automated incident response or AI-enabled security workflows.
• Experience in financial services, trading platforms, fintech or other business-critical environments.
• Familiarity with CIS Benchmarks, MITRE ATT&CK, OWASP, NIST and ISO 27001.
• Degree in Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent practical
experience.
Personal Attributes
• Strong ownership, independent judgement and accountability for technical outcomes.
• A practical engineering approach with a preference for automation and sustainable solutions.
• An investigative mindset and the ability to challenge assumptions with evidence.
• Sound judgement when introducing changes or testing business-critical environments.
• A collaborative approach that balances security requirements with operational needs.
Demonstrated technical capability, engineering outcomes and practical AWS expertise will carry greater weight
than certifications alone.