(Senior) AWS Cloud Security Engineer d/f/m

(Senior) AWS Cloud Security Engineer d/f/m

Location(s):

Swindon, Wiltshire, GB, SN5 6PB Essen, NW, DE, 45141

RWE Supply & Trading GmbH

To start as soon as possible, full time / part time, permanent

Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer. You will help secure, evolve and operate the AWS platform that teams across RWE Supply and Traiding GmbH (RWEST) rely on to build and run business-critical applications. Working closely with platform engineers, application teams and security specialists, you will embed security into our cloud foundations, operating model and shared platform services. We value innovation, collaboration, and continuous improvement.

As an AWS Cloud Security Engineer, you will act as a bridge between application delivery, and security departments. Your focus will be to ensure that AWS services, platform patterns, infrastructure as code, CI/CD pipelines, identity and access controls, monitoring, and security tooling are designed and operated securely from the start. You will support teams in identifying and remediating risks, integrate security controls into the platform, improve vulnerability and configuration management, and help shape secure cloud practices that are practical, scalable, and aligned with RWESTs Security Engineer pathway.

About the role

Design, implement, and improve security controls for AWS platform services.

Translate security requirements into reusable platform patterns, guardrails and operational controls that teams can adopt consistently.

Review AWS architectures, permissions, configuration settings and deployment approaches to identify weaknesses and recommend pragmatic remediations.

Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents.

Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services.

Work closely with application teams, platform engineers and security stakeholders to embed security from the start.

Job requirements and experience

Strong hands-on experience securing and operating AWS environments at scale, with a solid understanding of AWS security architecture, shared responsibility principles and cloud-native security controls.

Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation.

Knowledge of SSDLC practices and threat modelling.

Ability to review cloud architectures and technical designs from a security perspective.

Understanding of authentication and authorization patterns.

Strong communication and collaboration skills, with the ability to translate security requirements into clear guidance for application teams.

Curiosity and continuous learning mindset, including interest in AI-assisted security operations, intelligent automation, and responsible use of emerging technologies.

Advantageous, but not essential

Experience in governing large multi-account AWS environments.

Relevant professional certifications such as AWS Certified Security – Specialty, AWS Solutions Architect, CISSP, CCSP or comparable qualifications.

Experience with AWS security services and platform capabilities.

Familiarity with security frameworks and standards such as CIS Benchmarks, NIST, ISO 27001 or AWS Well-Architected Security Pillar.

Experience working in a regulated, financial, energy or other business-critical technology environment.

Experience applying AI-assisted tools safely for code review, vulnerability triage, log analysis, anomaly detection, documentation, or security automation.