Cloud Security Engineer London National Security West

• Design, build, and maintain secure, cloud-native solutions to support our Security Operations Centre (SOC) capabilities.
• Develop and deploy cloud infrastructure using Infrastructure as Code (Terraform, CloudFormation, or AWS CDK).
• Design and implement secure AWS architectures that align with security and compliance requirements.
• Build and maintain security monitoring, alerting, and automated response capabilities across cloud environments.
• Integrate cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk.
• Leverage AWS security services and promote security best practices across engineering and development teams.
• Support incident response investigations, threat hunting activities, and security improvement initiatives.
• Develop reusable implementation patterns, standards, and automation to improve consistency and security across projects.
• Manage software configuration, source code repositories, and CI/CD pipelines in line with DevSecOps principles.
• Work closely with internal and external stakeholders to deliver secure and innovative cloud solutions.
• Identify opportunities to leverage AI and automation to enhance security operations and operational efficiency.
• For Senior Engineers, lead technical delivery, mentor engineers, and drive engineering best practices within the team.

Technologies:

• AI
• AWS
• Ansible
• Bash
• CI/CD
• Cloud
• CloudWatch
• DevSecOps
• Grafana
• IAM
• Support
• Kubernetes
• OpenShift
• Prometheus
• Puppet
• Python
• Security
• Splunk
• Terraform, We are BAE Systems Digital Intelligence, home to 4,500 digital, cyber, and intelligence experts working across 10 countries to collect, connect, and understand complex data so governments, nation states, armed forces, and commercial businesses can unlock digital advantage in demanding environments. We are hiring a Cloud Security Engineer in London to support our Security Operations Centre capabilities. We offer a hybrid working environment, 25 days holiday, flexible working options, private medical and dental insurance, a competitive pension scheme, cycle to work, taste cards, and other flexible benefits. We also provide dedicated career management, training and certification opportunities, and a collaborative, inclusive culture where we value diversity, integrity, and merit. Our National Security team is growing, with opportunities to contribute to client work and local community engagement.

• Skilled in a range of AWS services and committed to keeping up to date with the latest releases and best practices.
• Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection, and data protection.
• Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk.
• Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls.
• Knowledge of DevSecOps practices and integrating security controls into CI/CD pipelines.
• Experience using Infrastructure as Code, for example Terraform, CloudFormation, or AWS CDK.
• Experience with monitoring and observability tools such as CloudWatch, Grafana, or Prometheus.
• Experience with container orchestration platforms such as Kubernetes, Amazon ECS, or OpenShift, including container security best practices.
• Understanding of networking principles and how they translate to software-defined networking in cloud environments.
• Experience using configuration management tools such as Ansible, Puppet, or Chef.
• Proficiency in scripting in at least one language, such as Python, Bash, or Go.
• A keen interest in AI and emerging cyber security technologies.
• Excellent troubleshooting, automation, and problem-solving skills.
• A collaborative mindset with a passion for learning new technologies and cyber security trends.
• AWS certifications are desirable but not essential.
• For this role, we require the permanent and unrestricted right to live and work in the UK.
• Successful candidates will be required to go through Government SC clearance prior to starting and obtain Developed Vetting once started.
• Some roles may be subject to Baseline Personnel Security Standard and additional National Security Vetting requirements, including residency expectations.