Senior Cloud Security Engineer

About the role

Accelya is seeking a hands‑on Cloud Security Engineer to act as the remediation subject‑matter expert across its AWS environment. The role owns the full lifecycle of security findings, from vulnerability analysis to remediation, and supports incident investigations and architecture reviews.

Key responsibilities

• Analyze code and infrastructure for security vulnerabilities (SAST, SCA, IaC misconfigurations) and work with development teams to remediate.
• Tri­age, prioritize, and drive remediation of Upwind CSPM findings across AWS accounts, workloads and services.
• Maintain and improve detection and remediation workflows, including automation with Lambda, EventBridge and SSM Automation.
• Act as the go‑to SME for AWS security tooling (Security Hub, GuardDuty, Config, IAM Access Analyzer, Inspector, Upwind).
• Assist in cloud security incident investigations, log analysis and post‑incident reviews.
• Participate in cloud security architecture reviews, providing risk‑based recommendations.

Required profile

• 3+ years of hands‑on cloud security experience with deep AWS knowledge.
• Direct experience remediating findings from CSPM/CNAPP platforms (e.g., Upwind, Wiz, Prisma Cloud).
• Experience with application‑level vulnerability remediation (SAST, SCA, container image scanning).
• Strong communication skills in English, able to explain technical risk to both technical and non‑technical stakeholders.

Required skills

• AWS services: IAM, VPC, KMS, S3, CloudTrail, Security Hub, GuardDuty, Config, Inspector.
• CSPM tools: Upwind (or similar).
• Infrastructure as Code: Terraform and/or CloudFormation.
• Scripting: Python and/or Bash.
• Automation: AWS Lambda, EventBridge, SSM Automation.
• Container security: EKS, ECR, Docker image scanning.