Overview
We are seeking an experienced Platform Security Engineer with a strong background in AWS to enhance the cloud security posture of a well-established technology company. The contractor will work closely with platform, infrastructure, and security teams to implement security controls aligned to the Cyber Assessment Framework (CAF), assess existing environments, and produce compliance documentation. This role provides an opportunity to influence the organization's security practices while delivering on a critical security programme.
Responsibilities
- Lead the implementation of security controls across a large AWS environment.
- Drive delivery against the CAF 4 security framework.
- Improve cloud security posture across identity, networking, logging, and resilience.
- Produce technical documentation and compliance evidence for senior stakeholders.
- Review and strengthen supplier and cloud security governance.
- Implement security best practices across IAM, MFA, networking, and encryption.
- Enhance logging, monitoring, alerting, and threat detection capabilities.
- Work alongside platform engineering teams to embed security into cloud infrastructure.
Requirements
- Strong experience as a Platform Security Engineer, Cloud Security Engineer, or Security-Focused Platform Engineer.
- Expert-level AWS security knowledge.
- Previous delivery against Cyber Assessment Framework (CAF) controls (CAF 4 experience highly desirable).
- Strong understanding of cloud identity and access management (IAM).
- Experience securing Kubernetes/EKS environments.
- Cloud networking and segmentation expertise.
- Experience producing compliance evidence and technical security documentation.
- Comfortable engaging with senior technical and non-technical stakeholders.