Senior Cloud Security Engineer

Key Responsibilities

Cloud Security Architecture & Design

Define and maintain cloud security architectures, reference designs, and baseline configurations.

Embed security-by-design principles into cloud platform and workload architectures.

Support secure adoption of cloud-native, microservices, and event-driven architectures.

Cloud Security Controls & Tooling

Implement and operate cloud-native and third-party security tooling, including:

Cloud Security Posture Management (CSPM)

Cloud Workload Protection Platforms (CWPP)

Cloud-native logging, monitoring, and threat detection services

Define and enforce security guardrails using policy-as-code and automation.

Ensure secure configuration of networking, storage, compute, and managed services.

Identity, Access & Data Protection

Design and support cloud identity and access management (IAM) controls, including least privilege and role-based access.

Support secure authentication, authorisation, and secrets management practices.

Ensure data protection controls such as encryption, key management, and data lifecycle controls are correctly implemented.

Monitoring, Detection & Incident Support

Ensure cloud security telemetry and audit logs are enabled, accurate, and integrated into SIEM and SOC workflows.

Investigate cloud-related security alerts, misconfigurations, and incidents.

Support containment, remediation, and recovery actions during cloud security incidents.

Contribute to post-incident reviews and preventative control improvements.

Risk Assessment & Assurance

Conduct cloud security risk assessments, architecture reviews, and threat modelling exercises.

Identify and prioritise cloud security risks based on business impact and likelihood.

Support compliance and assurance initiatives, including NIST, ISO/IEC 27001, and SOC 2.

Provide evidence and documentation to support audits and security assessments.

Collaboration & Enablement

Partner with cloud platform and engineering teams to embed security controls into delivery processes.

Act as a cloud security subject matter expert for projects and initiatives.

Communicate cloud security risks and recommendations clearly to technical and non-technical stakeholders.

Continuous Improvement

Monitor emerging cloud security threats, vulnerabilities, and technology trends.

Continuously improve cloud security posture, automation, and operational efficiency.

Contribute to the maturity of Keyloop’s overall security engineering capability.

Required experience & skillsets

5+ years of experience in cloud security, cloud engineering, or security engineering roles.

Strong hands-on experience with at least one major cloud platform (AWS, Azure).

Practical experience implementing cloud security controls and monitoring solutions.

Solid understanding of shared responsibility models and cloud-native architectures.

Technical Skills

Cloud security architecture and design

Identity and access management

Cloud-native security tooling and automation

Security monitoring and incident response