Cloud Security Engineer

Salary: £95,000 - 95,000 per year

Requirements:

• We are looking for candidates skilled in a range of AWS services and up to date with the latest releases and best practices.
• We want experience with AWS security services and cloud security best practices, including identity, monitoring, threat detection and data protection.
• We are looking for an understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk.
• We need a strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls.
• We are looking for knowledge of DevSecOps practices and integrating security controls into CI/CD pipelines.
• We want experience using Infrastructure as Code, such as Terraform, CloudFormation or AWS CDK.
• We are looking for experience with monitoring and observability tools such as CloudWatch, Grafana or Prometheus.
• We want experience with container orchestration platforms such as Kubernetes, Amazon ECS or OpenShift, including container security best practices.
• We are looking for an understanding of networking principles and how they translate to software-defined networking in cloud environments.
• We want experience using configuration management tools such as Ansible, Puppet or Chef.
• We are looking for proficiency in scripting in at least one language, such as Python, Bash or Go.
• We want a keen interest in AI and emerging cyber security technologies.
• We need excellent troubleshooting, automation and problem-solving skills.
• We are looking for a collaborative mindset with a passion for learning new technologies and cyber security trends.
• AWS certifications are desirable but not essential.
• For our senior engineers, we are looking for the ability to lead technical delivery, mentor engineers and drive engineering best practices within the team.
• Applicants must have the permanent and unrestricted right to live and work in the UK.
• Successful candidates will be required to go through Government SC clearance prior to starting and obtain Developed Vetting once started.

Responsibilities:

• Designing, building and maintaining secure, cloud-native solutions to support our Security Operations Centre (SOC) capabilities.
• Developing and deploying cloud infrastructure using Infrastructure as Code (Terraform, CloudFormation or AWS CDK).
• Designing and implementing secure AWS architectures that align with security and compliance requirements.
• Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments.
• Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk.
• Leveraging AWS security services and promoting security best practices across engineering and development teams.
• Supporting incident response investigations, threat hunting activities and security improvement initiatives.
• Developing reusable implementation patterns, standards and automation to improve consistency and security across projects.
• Managing software configuration, source code repositories and CI/CD pipelines in line with DevSecOps principles.
• Working closely with internal and external stakeholders to deliver secure and innovative cloud solutions.
• Identifying opportunities to leverage AI and automation to enhance security operations and operational efficiency.
• For senior engineers, leading technical delivery, mentoring engineers and driving engineering best practices within the team.

Technologies:

• AI
• AWS
• Ansible
• Bash
• CI/CD
• Cloud
• CloudWatch
• DevSecOps
• Grafana
• IAM
• Support
• Kubernetes
• OpenShift
• Prometheus
• Puppet
• Python
• Security
• Splunk
• Terraform

More:

We are BAE Systems Digital Intelligence, home to 4,500 digital, cyber and intelligence experts working collaboratively across 10 countries to help governments, nation states, armed forces and commercial businesses unlock digital advantage in demanding environments. This Cloud Security Engineer role is based in Leeds and supports our growing National Security business. We offer 25 days holiday, flexible and part-time working around core hours, a flexible benefits package with private medical and dental insurance, a competitive pension scheme, cycle to work scheme, taste cards and more, plus training and certification opportunities and a dedicated Career Manager to support your development. We are embracing hybrid working and offer an inclusive culture that values diversity, integrity and merit, with community engagement and outreach opportunities and a range of wellbeing and lifestyle benefits including an employee share plan, private health plans and shopping discounts.

last updated 34 week of 2026