OM Bank - Cloud Security Engineer

Description

At OM Bank, we strive to attract great people who are passionate about coming together for a higher purpose- building something unique and aspirational, always aiming to be the best they can be. We are rooted in our purpose of inspiring and enabling our customers to grow and sustain their prosperity.

The Cyber Cloud Security Engineer is responsible for implementing and maintaining the organisation’s cloud and endpoint security controls across a predominantly AWS ecosystem. Reporting to the Dev Sec Ops  Lead, the role ensures that identified risks and vulnerabilities are technically addressed through automation, engineering, and secure configuration.

This position serves as the technical foundation for cyber defence and risk management, enabling proactive threat detection, secure infrastructure delivery, and rapid response to incidents in alignment with the bank’s cloud-native and regulatory commitments.

Operating within a highly regulated digital banking environment, the Cyber Cloud Security Engineer safeguards critical systems hosted on AWS and Microsoft platforms through secure architecture, infrastructure-as-code (IaC) governance through to endpoint protection and the integration of such systems.

The Engineer collaborates closely with Cyber Risk Analysts, Dev Sec Ops , and the Cyber Defence Team to implement secure configurations, respond to threats, and drive compliance automation.

The role demands hands-on technical expertise across AWS security services, Azure endpoint and identity tooling, and a strong understanding of modern cloud security patterns and zero-trust principles

KEY RESULT AREAS

Cloud Security Implementation:
Deploy, configure, and optimize AWS security services (Guard Duty, Security Config, KMS, IAM, VPC, Route 53, and EKS security features).

Infrastructure as Code (IaC) Hardening:
Embed security best practices in Terraform and Cloud Formation; integrate scanning and security checks in CI/CD pipelines using Git Hub Actions and ArgoCD.

Identity and Access Management:
Support Azure AD / Entra , conditional access, RBAC, and access package reviews to maintain least-privilege principles by utilizing terraform.

Incident Response

Collaboration:

Assist in cyber incident investigations, performing forensic data collection, root-cause analysis, and containment support.

Threat Detection & Automation:
Assist in improving Sentinel detections, enrich Guard Duty alerts, and build automated playbooks for response and remediation.

Risk Remediation Execution:
Translate cyber risk findings from analysts into actionable engineering tasks and verify implemented mitigations.

Security Tooling Integration:
Assist in Integrating cloud, endpoint, and DNS inspection tools with SIEM and SOAR platforms to strengthen detection and response capabilities.

Compliance & Audit Support:
Provide evidence and configuration documentation to support internal audit, regulatory, and external assurance activities.

Continuous Improvement:
Enhance automation, logging, and compliance posture through “Security as Code” principles and self-service operational tooling.

ROLE REQUIRMENTS

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.

Certifications (Preferred):

AWS Certified Security – Specialty

AWS Certified Solutions Architect (Associate or Professional)

Microsoft Certified:
Security Operations Analyst Associate

Terraform Associate (Hashi Corp Certified)

CompTIA Security+ or CySA+

Experience:

3–5 years’ experience in cloud or cyber security engineering, with strong AWS exposure.

Demonstrated experience in Terraform, Cloud Formation, CI/CD pipeline security, and configuration compliance.

Familiarity with SIEM/SOAR operations (Microsoft Sentinel preferred).

Exposure to incident response, forensics, and vulnerability management.

Working knowledge of security frameworks: NIST CSF, CIS Controls, ISO 27001

Why Join Us

Join a modern, cloud-native digital bank where cybersecurity is a strategic differentiator. As part of the Cloud Security Dev Secops team, you’ll work with cutting-edge AWS and Microsoft security tooling to defend one of South Africa’s most innovative financial…