Cloud Security & DevSecOps Engineer (AWS)

Location: Remote/Malta (depending on candidate) Contract: Full-time Level: Senior / Strong Mid-Senior

About the Role

We are looking for an experienced Cloud Security & DevSecOps Engineer to strengthen the security of our AWS infrastructure and applications within a growing B2B iGaming technology environment.

This is a hands-on technical role for someone who can identify vulnerabilities, implement security controls, automate processes and improve infrastructure resilience. The focus is on building a proactive security framework and embedding security throughout development and deployment operations.

Key Responsibilities

• Assess and secure AWS environments, including IAM, VPC, EC2, ECS, Fargate, RDS and S3.
• Identify and remediate vulnerabilities, misconfigurations and potential security risks.
• Implement AWS security services such as GuardDuty, Security Hub, Inspector, CloudTrail, WAF and KMS.
• Strengthen access controls, encryption, secrets management and network security.
• Introduce automated vulnerability scanning, threat detection and security monitoring.
• Integrate security checks into CI/CD pipelines, including code, dependency, secrets and container scanning.
• Secure Docker containers, cloud workloads, APIs and deployment environments.
• Improve infrastructure hardening, patch management, backups and disaster recovery security.
• Develop incident response procedures, security alerts and remediation processes.
• Maintain security policies and support audits and compliance requirements.

Requirements

• 4+ years of experience in Cloud Security, DevSecOps or Infrastructure Security.
• Strong hands-on AWS security experience and knowledge of IAM, VPC, encryption and cloud architecture.
• Experience securing Linux servers, Docker containers, EC2, ECS and Fargate.
• Practical experience implementing security automation within CI/CD pipelines.
• Knowledge of vulnerability management, threat detection and incident response.
• Experience with Terraform or other Infrastructure as Code tools.
• Python, Bash or similar scripting skills.
• Good understanding of web and API security, including OWASP Top 10.
• Ability to independently assess risks and implement practical security solutions.

Nice to Have

• AWS Security Specialty certification or equivalent.
• Experience in iGaming, FinTech, Payments or other high-traffic transactional environments.
• Knowledge of ISO 27001, SOC 2 or PCI DSS.
• Experience with Kubernetes, SIEM platforms and security monitoring tools.
• Familiarity with penetration testing and security assessment methodologies.

First 90 Days

• First 30 days: Assess AWS infrastructure, identify security gaps and deliver a prioritised remediation plan.
• Days 31-60: Address critical vulnerabilities, strengthen access controls and introduce security automation.
• Days 61-90: Establish continuous monitoring, improve incident response and deliver a longer-term security roadmap.

What We’re Looking For

A proactive, hands-on engineer who can take ownership of cloud security improvements from assessment through implementation. This is not a purely advisory or compliance-focused role; we need someone capable of designing solutions, implementing controls, automating security processes and continuously improving infrastructure protection.

• 4+ years of experience in Cloud Security, DevSecOps or Infrastructure Security.
• Strong hands-on AWS security experience and knowledge of IAM, VPC, encryption and cloud architecture.
• Experience securing Linux servers, Docker containers, EC2, ECS and Fargate.
• Practical experience implementing security automation within CI/CD pipelines.
• Knowledge of vulnerability management, threat detection and incident response.
• Experience with Terraform or other Infrastructure as Code tools.
• Python, Bash or similar scripting skills.
• Good understanding of web and API security, including OWASP Top 10.
• Ability to independently assess risks and implement practical security solutions.

Nice to Have

• AWS Security Specialty certification or equivalent.
• Experience in iGaming, FinTech, Payments or other high-traffic transactional environments.
• Knowledge of ISO 27001, SOC 2 or PCI DSS.
• Experience with Kubernetes, SIEM platforms and security monitoring tools.
• Familiarity with penetration testing and security assessment methodologies., A proactive, hands-on engineer who can take ownership of cloud security improvements from assessment through implementation. This is not a purely advisory or compliance-focused role; we need someone capable of designing solutions, implementing controls, automating security processes and continuously improving infrastructure protection.