Cloud Security Engineer

• 5+ years in cloud security or security engineering, with hands-on experience in both AWS and GCP
• Experience with Upwind or a comparable CNAPP/CSPM platform (Wiz.io, Prisma Cloud, Orca)
• Strong understanding of risk-based prioritisation and security posture management
• Knowledge of identity and access management, including AWS IAM, GCP IAM, and Microsoft Entra ID
• Basic understanding of agentic AI architectures and tool use
• Familiarity with cloud security frameworks and benchmarks such as NIST SP 800-53 and CIS AWS and GCP Foundations Benchmarks
• Experience with Terraform and scripting for automation
• Strong communication skills and the ability to work autonomously, fluent English

About the role

In this role, you will work as a hands-on engineer embedded in the client’s cloud security team, operating at the intersection of cloud engineering, security operations, and risk management. You will primarily work with multi-account AWS and GCP environments, operating the client’s CNAPP platform and ensuring it delivers full coverage and reliable visibility across accounts, workloads, and identities. A significant part of the role is building the triage process and driving remediation with engineering teams — not just reporting findings — while over time helping strengthen the overall cloud security posture as the program matures and new capabilities are adopted.

,[Own, configure, and maintain Upwind across AWS and GCP environments, working with cloud engineering teams to ensure full coverage and visibility, Run day-to-day cloud vulnerability management within the defined program, applying agreed processes and SLAs, and deliver regular reporting, Prioritise findings based on real business risk and context, such as exposure, data sensitivity, and exploitability, rather than severity scores alone, Drive remediation with engineering teams through clear, actionable tickets and consistent follow-up, Improve the overall cloud security posture in line with industry frameworks and best practices] Requirements: Security, Cloud security, AI, AWS, GCP, Prisma, Orca, Terraform Additionally: Sport subscription, Training budget, Private healthcare, International projects, Flat structure, Small teams, Free coffee, Bike parking, Free snacks, Free parking, In-house trainings, Modern office, No dress code.