AWS Cloud Security Engineer

AWS Cloud Security Engineer Manchester | Hybrid ideally 3 days per week onsite £60,000 £ 80,000  68% bonus  stock options  private medical  pension Own cloud security where the impact is real We're hiring an experienced AWS Cloud Security Engineer to become the dedicated UK security specialist for a growing international technology business operating in the public-safety sector. The organisation develops cloud-native software used in environments where security, resilience and availability genuinely matter .

As its UK operation continues to grow, you'll take meaningful ownership of security across its AWS environment while working closely with an established Cybersecurity function in the US. This isn't a role where you'll spend your week writing policies or simply passing findings to somebody else. You'll be expected to understand the environment, work directly with AWS security controls, assess vulnerabilities and threats, support security incidents and help engineering teams make good security decisions.

At the same time, you won't be expected to arrive having done every part of the job already. If you've built strong AWS security experience and are ready for greater ownership, broader project exposure and the opportunity to become the key security presence for a growing UK operation, this could be an excellent next move. What you'll be doing You'll take day-to-day security ownership of the UK AWS environment, working with Cybersecurity, Dev Ops, Infrastructure and other engineering teams.

Your work will include:
Maintaining and improving AWS security controls and cloud security posture. Identifying vulnerabilities, assessing their real-world risk and helping drive remediation. Monitoring emerging threats and translating them into practical actions. Working with AWS-native security tooling, including environments using Guard Duty and Cloud Trail . Reviewing configurations and identifying opportunities to harden the AWS estate. Supporting security incidents as the UK security point of contact, coordinating effectively with the wider Cybersecurity team.

Contributing to new cloud services and security projects. Helping align UK AWS security controls with the organisation's wider US environment. Advising technical teams on the security implications of cloud changes and new services. Taking part in an out-of-hours on-call rotation. Occasionally helping with broader local technology issues in the Manchester office where needed. The final point is intentionally broad: this is not an IT support job .

You'll simply be a trusted technical presence locally and should be comfortable helping when something falls outside a neat job-description boundary. The client specifically clarified that this element is expected to be occasional rather than day-to-day. What we're looking for The strongest candidates are likely to have around five or more years in cybersecurity , with meaningful hands-on experience securing AWS environments.

You'll ideally bring:
Strong practical AWS cloud security experience. Experience maintaining or improving cloud security controls. Vulnerability assessment, prioritisation and remediation experience. Exposure to security incidents, including investigation, triage or coordination. Experience using AWS-native security and monitoring services. Good understanding of cloud security configuration and hardening. Experience working alongside Infrastructure, Dev Ops or Engineering teams. The judgement to distinguish an important security issue from background noise.

The confidence to operate independently while knowing when to involve others. Clear communication with both technical and non-technical stakeholders.

Experience with Guard Duty and Cloud Trail would be particularly relevant, although the hiring team is open to candidates with strong transferable AWS security experience rather than expecting an exact match across every tool. Useful, but not essential Experience in any of the following would strengthen your application:
Terraform or cloud security automation. Cloud architecture or security design reviews. SIEM and cloud security monitoring. Security assurance or compliance. Highly regulated or security-sensitive environments. Cyber Essentials or ISO 27001 environments. AWS or broader security certifications. You do not need to have been the formal Incident Manager for major incidents. Experience supporting and coordinating security incidents is sufficient; there is scope to take greater ownership as you develop in the role.

This was specifically confirmed during the client briefing. Why consider it? You'll be joining at an unusually interesting point in the organisation's UK growth. You'll be the first dedicated UK hire in this Cybersecurity team, with an established US function behind you rather than being left to build everything alone. There is genuine scope to shape how the UK security capability develops as the organisation grows.

You'll also be working for a business whose technology…