Cloud Security Expert (AWS & Azure)

We are looking for a detail-oriented and DevOps-minded Cloud Security Expert to join a larger cloud engineering team working for our end client in the EU. In this role, you will focus on the security of the deployment pipeline across AWS and Azure environments. You will follow the team’s agile way of working, contribute to weekly planning sessions, and periodically present and advocate for your work in front of advisory and security boards. 

The Cloud Security Expert is responsible for the end-to-end design, implementation, and continuous monitoring of robust security controls across public cloud environments. This role acts as a primary security partner to engineering teams, embedding compliance, threat protection, and automated guardrails directly into cloud workloads and deployment workflows. 

Key Responsibilities:
• Cloud Architecture & Consulting: Advise project and engineering teams on secure architecture design and the hardened consumption of cloud services across multi-cloud (AWS & Azure) environments. 
• Security Controls Implementation: Deploy, review, and optimize security controls spanning Identity & Access Management (IAM), network perimeter/segmentation, centralized logging, monitoring, data protection, and vulnerability management.
• Assessments & Threat Modeling: Conduct structured security assessments, threat analyses, and architectural reviews, defining actionable remediation measures for new and existing cloud solutions. 
• DevSecOps Integration: Partner with platform teams to embed automated security policies, static/dynamic code scans, and guardrails directly into CI/CD pipelines and deployment automation. 
• Risk & Compliance Management: Drive operational vulnerability management processes and gather technical evidence required for internal compliance reviews and external audits. 
• Visibility & KPI Governance: Increase organizational transparency by building reporting dashboards to monitor technical security controls, enabling engineering teams to identify issues proactively before they breach baseline performance scores and security KPIs.
• Stakeholder Alignment: Coordinate cross-functionally with technical leads, risk officers, and external partners to align security standards with overall project delivery goals. 

Qualifications & Skills:
• Solid, hands-on cloud experience across both AWS and Azure. 
• Background in DevSecOps or security-focused deployment/CI-CD engineering. 
• Experience with securing deployment pipelines (e.g. vulnerability/dependency scanning, container security, secrets management). 
• Bachelor’s degree or higher. 
• Fluent in English (written and spoken). 
• Comfortable working as part of a larger team. 
• Strong communication skills, including the ability to present and justify technical/security decisions to non-technical or governance-oriented boards.

• Technology stack:
Cloud Platforms: AWS, Microsoft Azure Infrastructure as Code (IaC): Terraform, OpenTofu, Bicep, AWS CloudFormation DevSecOps & CI/CD Tooling: GitLab CI, GitHub Actions, Jenkins, ArgoCD Security & Vulnerability Scanners: Prisma Cloud, Wiz, Snyk, Aqua, Trivy, SonarQube SIEM, Observability & Dashboards: Splunk, Datadog, Microsoft Sentinel, Power BI Compliance Frameworks: CIS Benchmarks, NIST CSF, ISO 27001, SOC 2.

What You’ll Get: 
• Private health insurance.  
• Sports compensation (gym memberships or online subscriptions).  
• Flexible working schedule.Education budget for certifications, training, and conferences (a part of which can be used for personal tech).  
• Dedicated Books budget.  
• Participation in our 5 PM Club – a weekly 1-hour self-development initiative to work on your own ideas or improve public speaking through team presentations.