Cloud Security & DevSecOps Engineer (AWS)

Recruiter4you

About The Position

This is a hands-on technical role focused on strengthening the security of AWS infrastructure and applications in a growing B2B iGaming technology environment. The engineer will identify vulnerabilities, implement security controls, automate processes, and improve infrastructure resilience. The role emphasizes building a proactive security framework and embedding security throughout development and deployment operations. The position involves assessing and securing AWS environments, implementing AWS security services, strengthening access controls and encryption, and introducing automated scanning, threat detection, and monitoring. It also includes securing containers, workloads, APIs, and deployment environments; improving infrastructure hardening and recovery security; developing incident response processes; and maintaining policies while supporting audits and compliance. During the first 30 days, the engineer will assess AWS infrastructure, identify gaps, and deliver a prioritized remediation plan. Days 31–60 focus on addressing critical vulnerabilities, strengthening access controls, and introducing security automation. Days 61–90 focus on continuous monitoring, incident response improvements, and a longer-term security roadmap. The role is for a proactive, hands-on engineer who can own security improvements from assessment through implementation, rather than focusing solely on advisory or compliance work.

Requirements

At least 4 years of experience in Cloud Security, DevSecOps, or Infrastructure Security.
Strong hands-on AWS security experience and knowledge of IAM, VPC, encryption, and cloud architecture.
Experience securing Linux servers, Docker containers, EC2, ECS, and Fargate.
Practical experience implementing security automation within CI/CD pipelines.
Knowledge of vulnerability management, threat detection, and incident response.
Experience with Terraform or other Infrastructure as Code tools.
Python, Bash, or similar scripting skills.
Good understanding of web and API security, including OWASP Top 10.
Ability to independently assess risks and implement practical security solutions.

Nice To Haves

AWS Security Specialty certification or equivalent.
Experience in iGaming, FinTech, Payments, or other high-traffic transactional environments.
Knowledge of ISO 27001, SOC 2, or PCI DSS.
Experience with Kubernetes, SIEM platforms, and security monitoring tools.
Familiarity with penetration testing and security assessment methodologies.

Responsibilities

Assess and secure AWS environments, including IAM, VPC, EC2, ECS, Fargate, RDS, and S3.
Identify and remediate vulnerabilities, misconfigurations, and potential security risks.
Implement AWS security services such as GuardDuty, Security Hub, Inspector, CloudTrail, WAF, and KMS.
Strengthen access controls, encryption, secrets management, and network security.
Introduce automated vulnerability scanning, threat detection, and security monitoring.
Integrate security checks into CI/CD pipelines, including code, dependency, secrets, and container scanning.
Secure Docker containers, cloud workloads, APIs, and deployment environments.
Improve infrastructure hardening, patch management, backups, and disaster recovery security.
Develop incident response procedures, security alerts, and remediation processes.
Maintain security policies and support audits and compliance requirements.
Assess AWS infrastructure, identify security gaps, and deliver a prioritized remediation plan.
Establish continuous monitoring, improve incident response, and deliver a longer-term security roadmap.