Cloud Security Engineer – Gloucester- National Security West

About BAE Systems Digital Intelligence

BAE Systems Digital Intelligence is a leading force in digital, cyber, and intelligence, employing 4,500 experts across 10 countries. We collaborate to collect, connect, and understand complex data, empowering governments, nation states, armed forces, and commercial businesses to achieve digital advantage in challenging environments.

Cloud Security Engineer Role

We are seeking talented and versatile Cloud Security Engineers to join our Engineering team in Gloucester. You will play a key role in supporting and developing our innovative Security Operations Centre (SOC) capabilities. Our culture values resourceful, innovative, and dedicated individuals who deliver exceptional outcomes, fostering success through a diverse mix of specialists and generalists.

What We're Looking For:

• Proficiency in a range of AWS services and a commitment to staying updated with the latest releases and best practices.
• Experience with AWS security services and implementing cloud security best practices, including identity management, monitoring, threat detection, and data protection.
• Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms (e.g., Microsoft Sentinel, Splunk).
• Strong grasp of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls.
• Knowledge of DevSecOps practices and integrating security controls into CI/CD pipelines.
• Experience using Infrastructure as Code tools such as Terraform, CloudFormation, or AWS CDK.
• Experience with monitoring and observability tools like CloudWatch, Grafana, or Prometheus.
• Experience with container orchestration platforms (e.g., Kubernetes, Amazon ECS, OpenShift) and container security best practices.
• Understanding of networking principles and their application in cloud environments.
• Experience with configuration management tools (e.g., Ansible, Puppet, Chef).
• Proficiency in scripting languages such as Python, Bash, or Go.
• A keen interest in AI and emerging cyber security technologies.
• Excellent troubleshooting, automation, and problem-solving skills.
• A collaborative mindset with a passion for learning new technologies and cyber security trends.

AWS certifications are desirable but not essential. We offer comprehensive training and certification opportunities.

What You Could Be Doing:

• Designing, building, and maintaining secure, cloud-native solutions to support SOC capabilities.
• Developing and deploying cloud infrastructure using Infrastructure as Code (Terraform, CloudFormation, AWS CDK).
• Designing and implementing secure AWS architectures aligned with security and compliance requirements.
• Building and maintaining security monitoring, alerting, and automated response capabilities across cloud environments.
• Integrating cloud platforms with security tooling, including SIEM solutions like Microsoft Sentinel and Splunk.
• Leveraging AWS security services and promoting security best practices across engineering and development teams.
• Supporting incident response investigations, threat hunting activities, and security improvement initiatives.
• Developing reusable implementation patterns, standards, and automation to enhance consistency and security.
• Managing software configuration, source code repositories, and CI/CD pipelines in line with DevSecOps principles.
• Collaborating with internal and external stakeholders to deliver secure and innovative cloud solutions.
• Identifying opportunities to use AI and automation to improve security operations and efficiency.
• For Senior Engineers: Leading technical delivery, mentoring engineers, and driving engineering best practices.

Support and Benefits:

We value work-life balance and offer 25 days of holiday, with options to buy/sell/carry over. Enjoy flexible working hours, part-time options, and a comprehensive flexible benefits package including private medical and dental insurance, a competitive pension scheme, cycle to work scheme, and more. You'll have a dedicated Career Manager and access to excellent training courses to support your professional development.

Security Clearance:

Successful candidates will be required to obtain Government SC clearance prior to starting and may be required to obtain Developed Vetting (DV) once in the role. Applicants must have the permanent and unrestricted right to live and work in the UK. Baseline Personnel Security Standard (BPSS) is a minimum requirement.

Why BAE Systems?

Make a real difference in an inclusive culture that values diversity, rewards integrity, and empowers you to reach your potential. We welcome applications from all backgrounds and particularly encourage those currently under-represented in our industry. We strive for inclusive recruitment processes and offer reasonable adjustments for candidates with disabilities or health conditions.

Please note: Many roles are subject to security and export control restrictions, which may be influenced by your nationality, previous nationalities, and place of birth.

Life at BAE Systems Digital Intelligence:

We embrace Hybrid Working, allowing flexibility in when and where you work to enhance work-life balance and well-being. Diversity and inclusion are core to our success, fostering a culture where diverse perspectives drive excellence and individual potential is realized.