Senior Cloud Security Engineer

The Cloud Security Engineer is responsible for designing, implementing, and operating security controls that protect Keyloop's cloud environments and workloads. This role ensures cloud services are securely architected, configured, monitored, and continuously improved in line with business risk, regulatory requirements, and security best practices. The Cloud Security Engineer works closely with platform, infrastructure, and engineering teams to enable secure cloud adoption at scale, while supporting security operations, incident response, and compliance objectives.

Responsibilities

Design, implement, and operate security controls that protect Keyloop's cloud environments and workloads; Define and maintain cloud security architectures, reference designs, and baseline configurations; Embed security-by-design principles into cloud platform and workload architectures; Support secure adoption of cloud-native, microservices, and event-driven architectures; Implement and operate cloud-native and third-party security tooling including CSPM, CWPP, cloud-native logging, monitoring, and threat detection; Define and enforce security guardrails using policy-as-code and automation; Ensure secure configuration of networking, storage, compute, and managed services; Design and support cloud IAM controls including least privilege and role-based access; Support secure authentication, authorization, and secrets management; Ensure data protection controls such as encryption, key management, and data lifecycle controls are implemented; Ensure cloud security telemetry and audit logs are integrated into SIEM and SOC workflows; Investigate cloud security alerts, misconfigurations, and incidents; Support containment, remediation, and recovery actions during cloud security incidents; Contribute to post-incident reviews and preventative control improvements; Conduct cloud security risk assessments, architecture reviews, and threat modelling exercises; Support compliance and assurance initiatives including NIST, ISO/IEC 27001, and SOC 2; Provide evidence and documentation to support audits and security assessments; Partner with cloud platform and engineering teams to embed security controls into delivery processes; Act as a cloud security subject matter expert for projects and initiatives; Communicate cloud security risks and recommendations clearly to technical and non-technical stakeholders; Monitor emerging cloud security threats, vulnerabilities, and technology trends; Continuously improve cloud security posture, automation, and operational efficiency; Contribute to the maturity of Keyloop's overall security engineering capability

Requirements

5+ years of experience in cloud security, cloud engineering, or security engineering roles; Strong hands-on experience with at least one major cloud platform (AWS, Azure); Practical experience implementing cloud security controls and monitoring solutions; Solid understanding of shared responsibility models and cloud-native architectures; Cloud security architecture and design; Identity and access management; Cloud-native security tooling and automation; Security monitoring and incident response

Benefits

Opportunity to collaborate and learn from industry experts from all over the globe; Work with game-changing products and services; Training and support to try new things; Inclusive work environment; Pay and benefits based on performance; Investment in professional development; Culture of support and unbridled collaboration; Training and encouragement to use AI tools