AWS Cloud Security Operations Engineer
Own vulnerability and threat management, cloud security hardening, and incident response for an AWS environment supporting public-safety software. The role also provides on-site IT support in Manchester and requires at least five years of cybersecurity experience plus eligibility for NPPV3 and SC clearance.
About the job
Responsibilities
- Own the vulnerability management program end to end, including scans across cloud infrastructure, networks, and applications.
- Prioritize findings by risk and track remediation through closure.
- Research emerging threats and turn threat intelligence into actionable guidance on patching, monitoring, and hardening.
- Lead security alert response, including triage, containment, coordination, and post-incident reviews.
- Review AWS cloud security configurations and harden controls according to security best practices.
- Support Manchester office IT needs, including account access, hardware, and new-starter setup.
- Participate in the on-call rota for critical security incidents.
Requirements
- Minimum 5 years of cybersecurity experience, with a strong focus on vulnerability management, threat research, and cloud security.
- Experience with cloud environments, particularly AWS.
- Familiarity with vulnerability scanners, endpoint protection, and SIEM tooling.
- General IT support skills across Windows environments and networking.
- Ability to work on an on-call rota and collaborate across time zones.
- Ability to obtain and maintain NPPV3 and SC security clearance. Eligibility typically requires a minimum of 5 years' recent UK residency.
Nice to Have
- Awareness of UK data protection requirements.
- Familiarity with Cyber Essentials or ISO 27001.
Compensation and Benefits
- £60,000–£80,000 per year, depending on experience.
- Private medical insurance.
- Pension contributions.
- Equity participation.
Skills
AWS, Vulnerability Management, Threat Intelligence, Incident Response, Cloud Security, Vulnerability Scanners, Endpoint Protection, SIEM, Windows, Networking, Cyber Essentials, ISO 27001, Data Protection
Similar jobs
Security Engineering jobs
Vanta
Remote
Leads a global Security Operations team, setting detection, response, and security strategy while driving incident response and risk remediation. The role requires strong SaaS and cloud security experience, leadership ability, familiarity with major security standards, and responsible use of AI.
Vercel
San Francisco, CABuild and operate trust and safety systems that detect and mitigate abuse at internet scale. The role combines security engineering, large-scale data analysis, and applied LLM techniques, requiring 5+ years of relevant experience and strong Python and JavaScript/TypeScript skills.
Writer
London, United Kingdom
Build and scale application security for an enterprise AI platform through threat modeling, secure architecture, automated controls, code review, penetration testing, and AI/ML threat research. Requires 4+ years of application security experience and proficiency in at least two programming languages.
Supabase
Remote
Secures Supabase’s cloud platform, Kubernetes environments, containers, and infrastructure by conducting risk assessments, strengthening controls, and building scalable security guardrails. Requires senior-level platform or cloud security experience with deep AWS, Kubernetes, container, and Linux expertise.
Twilio
United KingdomLeads technical response to security events across cloud infrastructure, services, and applications, covering triage, containment, remediation, automation, and post-incident improvements. Requires 3+ years of cloud security incident response experience and expertise with SIEM, SOAR, and major cloud platforms.