Build security into modern AWS environments rather than bolting it on afterwards. Hands-on implementation paired with security engineering: hardening infrastructure and containers, embedding automated guardrails into CI/CD, and driving cloud posture toward SOC 2 and ISO 27001 readiness, in a distributed English-speaking delivery team.
What you'll do
- Architect, build and secure AWS environments across multi-account organisations, defined as Infrastructure as Code
- Integrate and automate security guardrails into the SDLC and CI/CD pipelines without slowing developer velocity
- Drive vulnerability remediation across AWS Security Hub, Inspector and GuardDuty to meet SLA targets
- Own container and base-image hardening — Docker, ECS, ECR image scanning and lifecycle management
- Design and enforce least-privilege identity and access (IAM / OIDC) patterns
- Support continuous security-evidence collection for SOC 2 and ISO 27001 compliance
- Champion "secure by default" principles through guidelines, examples and mentoring
Must have
- Strong hands-on AWS security experience in production
- Infrastructure as Code with Terraform (CDK / CloudFormation also valuable)
- CI/CD security integration — GitHub Actions or GitLab CI, automated scanning
- CSPM tooling and vulnerability remediation
- Least-privilege IAM / OIDC design and secure service-to-service communication
- Container security — Docker, ECS, ECR image scanning
- Professional English, verbal and written
Nice to have
- SOC 2 / ISO 27001 evidence and guardrail-automation experience
- SAST / DAST and penetration-testing exposure (e.g. OWASP ZAP)
- Background in software engineering or scalable cloud services
- FinOps / cloud cost-optimisation awareness
Apply for this role
Or email your CV to careers@luminovalabs.net and include the reference DS01 in the subject.