Cloud Security Engineer

Role Summary: The Cloud Security Engineer provides intermediate-level technical support for designing, implementing, and maintaining cloud security controls, identity and access management (IAM) policies, and security frameworks within AWS environments. This role is responsible for identifying, investigating, resolving, or escalating AWS Cloud Security and IAM-related issues while partnering closely with cross-functional teams to strengthen the organization's cloud security posture. As a member of the Cloud Identity Security team within the Enterprise Security & Fraud organization, the engineer helps protect cloud infrastructure through vulnerability management, security monitoring, access governance, policy enforcement, and continuous security improvement initiatives.

Key Responsibilities: Design, implement, deploy, and maintain cloud security solutions, controls, and security platforms to mitigate security threats, technology vulnerabilities, and operational risks within AWS environments. Support and monitor cloud security technologies, ensuring effectiveness through the use of monitoring tools, alerting systems, and security applications. Investigate, troubleshoot, resolve, or escalate AWS Cloud Security and AWS IAM incidents, access-related issues, and security events. Develop, maintain, and enhance cloud security standards, controls, testing procedures, log analysis processes, and vulnerability assessment methodologies. Perform security reviews, risk assessments, and remediation activities to strengthen cloud security and compliance posture. Monitor system access logs, audit trails, and security events to identify suspicious activity, anomalous behavior, or unauthorized access attempts that may indicate potential security breaches. Collaborate with engineering, infrastructure, DevOps, and application development teams to implement secure cloud solutions and promote security best practices. Support identity and access management initiatives, including access controls, role-based access management (RBAC), least-privilege principles, and cloud identity governance. Maintain technical documentation, operational procedures, security standards, and knowledge base articles for the team and department. Participate in security-focused projects, cloud modernization initiatives, and other duties as assigned. Identify opportunities to improve cloud security processes, automation, operational efficiency, and risk reduction efforts.

Qualifications: Minimum of three years related work experience. Undergraduate degree in a related field or the equivalent combination of training and experience.

Special Factors: SponsorshipVanguard is not offering visa sponsorship for this position.

About Vanguard: At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work: Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.