Cloud Security Engineer

Who we are

Employment Hero is on a mission to make employment easier and more valuable for everyone. Our Employment Operating System brings hiring, HR, payroll and benefits into an all-in-one solution. Since our inception in 2014, we’ve scaled to a $2 billion valuation and gained a presence in 6 countries globally – Australia, New Zealand, Singapore, Malaysia, the UK and Canada. We now service over 300,000 businesses and more than 2 million employees.

The EH Way

• Mission First – everything we do (from what we work on, to how we allocate capital and where we focus) is driven by our Mission
• Remote First – we champion a remote environment with a preference for asynchronous communication and a high degree of autonomy
• AI First – we are committed to using AI to accelerate our mission; AI is not just a tool, it’s a fundamental part of how we operate, innovate, and scale
• Apolitical – we do not take a position on political or social topics, unless it relates to our Mission
• Live by Our Values – we role model our values 100% of the time
• Expect High Performance – we set a high standard and we’re not satisfied with being average

This role

The Cloud Security Engineer is responsible for securing our AWS environment, with a strong focus on automation, AI-assisted workflows, and scalable security controls. This role is not just about fixing issues, but about building intelligent systems that continuously detect, prioritise, and remediate cloud risks with minimal manual effort.

As a Cloud Security Engineer, you will be responsible for:

• Cloud Security Engineering
  • Remediate cloud risks across IAM, network exposure, encryption, and workloads
  • Design and implement secure‑by‑default patterns across AWS (IAM guardrails, network segmentation, least privilege)
  • Partner with SRE and Engineering to embed security into infrastructure and deployments
• AI‑Driven Detection & Response
  • Leverage AI tools to triage, prioritise, and investigate cloud security findings
  • Build workflows that correlate signals from cloud logs, EDR, and third‑party tools into actionable insights
  • Continuously improve detection coverage using AI‑assisted analysis
• DevSecOps & Automation
  • Build automated security checks into CI/CD (IaC scanning, dependency risk, secrets detection)
  • Use AI to accelerate vulnerability triage and remediation workflows
  • Reduce manual security effort through scripting, automation, and intelligent tooling
• Security Data & Intelligence
  • Integrate and analyse data from sources such as SBOMs, vulnerability feeds, and threat intelligence
  • Use AI to identify patterns, emerging risks, and prioritisation signals across large datasets
  • Contribute to internal “security data platform” initiatives

Who You Are

• Required
  • Strong experience securing AWS environments
  • Solid understanding of IAM, networking, logging, and cloud‑native architectures
  • Experience with infrastructure‑as‑code (e.g. Terraform) and CI/CD pipelines
  • Ability to script and automate (Python, Bash, or similar)
  • Familiarity with SBOM, supply chain security, and dependency risk management
  • Experience using or integrating AI tools in engineering or security workflows
• Preferred
  • Experience with tools like AWS Security Hub, GuardDuty, Wiz, or Datadog
  • Experience building internal tools or automation platforms

What we can offer

At Employment Hero, we don’t just talk about a better way to work – we live it. Joining Employment Hero means:

• You will work remotely, with the flexibility to own your time and impact
• You will access cutting‑edge tools to amplify your work, knowledge and outputs
• You’ll surround yourself with ambitious, outcome‑driven colleagues who challenge you to do the best work of your life
• You’ll own ESOP (employee share options) in one of the world’s fastest‑growing tech companies
• You’ll also have access to a wide range of benefits that includes a very generous parental leave policy, subsidised egg freezing, a WFH office expense budget, and outstanding learning & development opportunities

We’re AI‑first, so you may meet some of our AI tools early in the process. They help us cut the noise, surface great talent fast and make sure every candidate gets a fair, consistent experience. We verify candidate identity and location as part of our hiring process. At Employment Hero, we are committed to safeguarding the privacy of your application data. To understand how we do so, you can read our Applicant Privacy Policy here employmenthero.com/legals/applicant-policy/. Employment Hero celebrates diverse perspectives and experiences, we invite people of all backgrounds and identities to apply for this position.