Platform Security Engineer

What You'll Be Doing

• Lead the implementation of security controls across a large AWS environment
• Drive delivery against the CAF 4 security framework
• Improve cloud security posture across identity, networking, logging and resilience
• Produce technical documentation and compliance evidence for senior stakeholders
• Review and strengthen supplier and cloud security governance
• Implement security best practices across IAM, MFA, networking and encryption
• Enhance logging, monitoring, alerting and threat detection capabilities
• Improve backup, recovery and incident response processes
• Work alongside platform engineering teams to embed security into cloud infrastructure
• Provide regular progress updates to senior stakeholders throughout the engagement

Essential Experience

• Strong experience as a Platform Security Engineer, Cloud Security Engineer or Security-Focused Platform Engineer
• Expert-level AWS security knowledge
• Previous delivery against Cyber Assessment Framework (CAF) controls (CAF 4 experience highly desirable)
• Strong understanding of cloud identity and access management (IAM)
• Experience securing Kubernetes/EKS environments
• Cloud networking and segmentation expertise
• CloudTrail, GuardDuty, VPC Flow Logs and security monitoring
• Infrastructure security and security architecture
• Experience producing compliance evidence and technical security documentation
• Comfortable engaging with senior technical and non-technical stakeholders

Nice to Have

• GCP exposure
• SIEM implementation experience
• Incident response and digital forensics knowledge
• Experience within regulated or highly secure environments
• Terraform or Infrastructure as Code experience

Tech Stack

• AWS
• IAM
• CAF 4
• EKS/Kubernetes
• CloudTrail
• GuardDuty
• VPC Flow Logs
• Cloud Networking
• MFA
• TLS/PKI
• DynamoDB
• RDS
• GitHub
• Terraform (desirable)

What's on Offer

• Immediate start
• Initial 6-month contract with potential extension
• Opportunity to shape the security posture of a large-scale cloud platform
• High-impact project working directly with senior engineering and security leadership
• Flexible hybrid working