Cloud Security Engineer Science Park

Salary: £95,000 - 95,000 per year

• We are looking for talented and versatile Cloud Engineers with a strong background in AWS and cloud security.
• We need experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection, and data protection.
• We need an understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk.
• We need a strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls.
• We need knowledge of Dev Sec Ops  practices and integrating security controls into CI/CD pipelines.
• We need experience using Infrastructure as Code, such as Terraform, Cloud Formation, or AWS CDK.
• We need experience with monitoring and observability tools such as Cloud Watch, Grafana, or Prometheus.
• We need experience with container orchestration platforms such as Kubernetes, Amazon ECS, or Open Shift, including container security best practices.
• We need an understanding of networking principles and how they translate to software-defined networking in cloud environments.
• We need experience using configuration management tools such as Ansible, Puppet, or Chef.
• We need proficiency in scripting in at least one language, such as Python, Bash, or Go.
• We value a keen interest in AI and emerging cyber security technologies.
• We need excellent troubleshooting, automation, and problem-solving skills.
• We value a collaborative mindset and a passion for learning new technologies and cyber security trends.
• AWS certifications are desirable but not essential.
• We will provide training and certification opportunities to support professional development.
• All applicants must have the permanent and unrestricted right to live and work in the UK.
• Successful candidates will be required to go through Government SC clearance prior to starting and obtain Developed Vetting once started.

• We will design, build, and maintain secure, cloud-native solutions to support our Security Operations Centre (SOC) capabilities.
• We will develop and deploy cloud infrastructure using Infrastructure as Code, including Terraform, Cloud Formation, or AWS CDK.
• We will design and implement secure AWS architectures that align with security and compliance requirements.
• We will build and maintain security monitoring, alerting, and automated response capabilities across cloud environments.
• We will integrate cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk.
• We will leverage AWS security services and promote security best practices across engineering and development teams.
• We will support incident response investigations, threat hunting activities, and security improvement initiatives.
• We will develop reusable implementation patterns, standards, and automation to improve consistency and security across projects.
• We will manage software configuration, source code repositories, and CI/CD pipelines in line with Dev Sec Ops  principles.
• We will work closely with internal and external stakeholders to deliver secure and innovative cloud solutions.
• We will identify opportunities to leverage AI and automation to enhance security operations and operational efficiency.
• For Senior Engineers, we will lead technical delivery, mentor engineers, and drive engineering best practices within the team.

• AI
• AWS
• Ansible
• Bash
• CI/CD
• Cloud
• Cloud Watch
• Dev Sec Ops
• Grafana
• IAM
• Support
• Kubernetes
• Open Shift
• Prometheus
• Puppet
• Python
• Security
• Splunk
• Terraform

We are BAE Systems Digital Intelligence, home to 4,500 digital, cyber, and intelligence experts working collaboratively across 10 countries to help governments, nation states, armed forces, and commercial businesses unlock digital advantage in demanding environments. This Cloud Security Engineer role is based in Manchester, UK, within our growing National Security business and Engineering team, supporting our innovative Security Operations Centre capabilities.

We offer hybrid working, flexible and part-time working around core hours, 25 days of holiday with the option to buy, sell, and carry over, private medical and dental insurance, a competitive pension scheme, cycle to work scheme, taste cards, and more. You will have a dedicated Career Manager, access to excellent training and certification opportunities, and the chance to make a real difference in an inclusive culture that values diversity, integrity, and merit.

We also support community engagement and outreach activities to help build tech and cyber skills in the region.