Job Description
Any additional information you require for this job can be found in the below text Make sure to read thoroughly, then apply.
Lynx Recruitment are partnered with a leading global consultancy to source an experienced Cloud Security Engineer to join a high-performing cloud and cybersecurity team.
This is an exciting opportunity to work on enterprise-scale cloud environments, driving security best practices and implementing cutting-edge cloud-native application protection solutions.
The Role
You will play a key role in designing, implementing, and managing cloud security controls across large-scale AWS environments, with a strong focus on policy-as-code and automation.
Key Responsibilities
* Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation
* Develop and maintain policy-as-code frameworks using OPA/Rego
* Integrate security controls into Infrastructure-as-Code (IaC) workflows using Terraform
* Collaborate closely with DevOps and Cyber Security teams to remediate non-compliant resources
* Monitor and enhance cloud governance and policy effectiveness
* Embed security into the SDLC through CI/CD pipelines (e.g. GitLab Runners), including vulnerability scanning and compliance checks
Key Requirements
* Strong experience with AWS (essential)
* Hands-on experience with Wiz (including custom xsngvjr rule development, graph rules, or configuration policies)
* Expertise in OPA/Rego for policy-as-code
* Proven experience with Terraform for infrastructure and security automation
* Scripting experience (Python, Bash, or PowerShell)
* Experience working within DevSecOps environments and implementing shift-left security
* Degree in an IT or technology-related subject with a minimum of a 2:1 (or equivalent)