Our client is a global tech company undergoing an exciting transformation, looking for a Cloud Security DevOps Engineer to join their growing team.
Skills and Requirements:
4+ years of experience in cloud security, DevSecOps, or platform engineering, with strong hands-on experience delivering automation-driven security solutions at enterprise scale.
Good level of SecDevOps capability, with strong experience in at least one hyperscaler (AWS, Azure, or GCP); multi-cloud experience is preferred.
Deep knowledge of Security as Code / Policy as Code, Infrastructure as Code (Terraform preferred), CI/CD security integration, cloud security architecture, vulnerability management, and compliance control design.
Strong programming skills in Python (preferred), Go, or Java, with the ability to build maintainable automation and engineering solutions.
Experience with CSPM / CNAPP platforms such as Orca, Prisma, Wiz, or Defender, as well as cloud-native security services; Kubernetes security experience is preferred.
Strong data-driven problem-solving skills, with the ability to work independently, navigate ambiguity, and drive alignment across multiple stakeholders.
Role and Responsibilities:
Build and maintain security controls across AWS, Azure, GCP, and other cloud environments, implementing automated compliance checks aligned with internal and industry-standard frameworks.
Develop and optimize CI/CD-based security solutions and remediation automations that reduce manual effort and improve mean time to remediation (MTTR).
Integrate CSPM tooling with enterprise workflows such as ServiceNow and Jira, and help operationalize new CSPM capabilities, controls, features, and integrations.
Support LoB onboarding and adoption by creating enablement materials and self-service security guidance, while defining and tracking adoption, coverage, and value metrics.
Reduce false positives and alert noise through control tuning, data analysis, improved alerting pipelines, and continuous refinement of security rules.
Contribute to service health reporting and dashboards, analyze operational metrics, and drive quarterly service improvement initiatives across the CSPM service.
Help mature operational processes for alert ownership and routing, exception handling, false-positive tracking, asset attribution, incident intake, and alert routing.
Partner with engineering, cloud platform, and LoB teams to align security controls and remediation, while supporting audit and compliance requirements through transparent reporting and data.
Independently own and deliver complex workstreams or features end-to-end, providing clear status, risks, and outcome reporting and contributing to strategic improvements.
For more information – please apply for this job or send your CV directly
Cavendish (Recruitment) Professionals Ltd are proud to be an equal opportunity employer and we believe that inclusivity begins with the candidate experience. All qualified applicants will receive consideration for employment regardless of gender, race, age, sexual orientation, religion, or belief.