Cloud Security Engineer - Leeds - National Security West

• Designing, building and maintaining secure, cloud-native solutions to support our Security Operations Centre (SOC) capabilities.
• Developing and deploying cloud infrastructure using Infrastructure as Code (Terraform, CloudFormation or AWS CDK).
• Designing and implementing secure AWS architectures that align with security and compliance requirements.
• Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments.
• Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk.
• Leveraging AWS security services and promoting security best practices across engineering and development teams.
• Supporting incident response investigations, threat hunting activities and security improvement initiatives.
• Developing reusable implementation patterns, standards and automation to improve consistency and security across projects.
• Managing software configuration, source code repositories and CI/CD pipelines in line with DevSecOps principles.
• Working closely with internal and external stakeholders to deliver secure and innovative cloud solutions.
• Identifying opportunities to leverage AI and automation to enhance security operations and operational efficiency.
• For Senior Engineers, leading technical delivery, mentoring engineers and driving engineering best practices within the team.

We are looking for talented and versatile Cloud Engineers to join our Engineering team, supporting and developing our innovative Security Operations Centre (SOC) capabilities.

Our people are what differentiate us. We value individuals who are resourceful, innovative, and dedicated to delivering exceptional outcomes. Our teams are built from a combination of specialists and generalists, and we recognise that this diversity of skills and experience drives our success. By bringing together different disciplines and perspectives, we create cutting-edge, high-quality solutions for our customers.

What background we are looking for:

• Skilled in a range of AWS services and keen to keep up to date with the latest releases and best practices.
• Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection.
• Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk.
• Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls.
• Knowledge of DevSecOps practices and integrating security controls into CI/CD pipelines.
• A desire to understand, support and develop our cutting-edge cloud activities focused on Security Operations.
• Experience using Infrastructure as Code, for example Terraform, CloudFormation or AWS CDK.
• Experience with monitoring and observability tools such as CloudWatch, Grafana or Prometheus.
• Experience with container orchestration platforms such as Kubernetes, Amazon ECS or OpenShift, including container security best practices.
• Understanding of networking principles and how they translate to software-defined networking in cloud environments.
• Experience using configuration management tools such as Ansible, Puppet or Chef.
• Proficiency in scripting in at least one language, such as Python, Bash or Go.
• A keen interest in AI and emerging cyber security technologies.
• Excellent troubleshooting, automation and problem-solving skills.
• A collaborative mindset with a passion for learning new technologies and cyber security trends.
• AWS certifications are desirable but not essential. We provide training and certification opportunities to support your professional development.

Pulled from the full job description

• Employee discount
• Private dental insurance
• Company pension
• Private medical insurance
• Cycle to work scheme, * Work-life balance is important; you’ll get 25 days holiday a year and, via our flexible benefits package the option to buy/sell and carry over from the year before
• You can work around core hours with flexible and part-time working
• Our flexible benefits package includes private medical and dental insurance, a competitive pension scheme, cycle to work scheme, taste cards and more
• You’ll have a dedicated Career Manager to help you develop your career and guide you on your journey through BAE
• Don’t know a particular technology? Your learning and development is key to your future career and we provide a range of excellent training courses to enable you to upskill in a given technology

Security Clearance

Only those with the permanent and unrestricted right to live and work in the UK will be considered for a position within BAE Systems Applied Intelligence. Due to the nature of our, work successful candidates for this role will be required to go through Government SC clearance prior to starting with us. https://www.gov.uk/guidance/security-vetting-and-clearance and obtain Developed Vetting once started., As well as a competitive pension scheme, BAE Systems also offer employee share plan, an extensive range of flexible discounted health, wellbeing and lifestyle benefits including including a green care scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive.

BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments., Why BAE Systems?

This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture which values diversity, rewards integrity and merit, and where you’ll be empowered to fulfil your potential. We welcome candidates from all backgrounds and particularly from sections of the community who are currently under-represented within our industry including women, ethnic minorities, people with disabilities and LGBTQ+ individuals

We also want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions such as your nationality, any nationalities which you previously may have held, and your place of birth can restrict the roles you are able to perform within the organisation.

All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Life at BAE Systems Digital Intelligence

We are embracing Hybrid Working. This means you and your colleagues may be working in different locations, such as from home, another BAE Systems office or client site, some or all of the time, and work might be going on at different times of the day.

By embracing technology, we can interact, collaborate and create together, even when we’re working remotely from one another. Hybrid Working allows for increased flexibility in when and where we work, helping us to balance our work and personal life more effectively, and enhance well-being.

Diversity and inclusion are integral to the success of BAE Systems Digital Intelligence. We are proud to have an organisational culture where employees with varying perspectives, skills, life experiences and backgrounds - the best and brightest minds - can work together to achieve excellence and realise individual and organisational potential.