Senior Cloud Security Engineer
- Compensation
- A$90K–A$110K / yr
- Location
- Sydney NSW
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Full time
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Nice to have
- Cloudflare Access, Gateway, Tunnel, D1 or Workers KV.
- Akamai, F5 Advanced WAF/ASM, Imperva or comparable security platforms.
- AWS, Azure or Google Cloud security.
- Infrastructure as code, CI/CD and automated security testing.
- Kubernetes and container security.
- Familiarity with PCI DSS, ISO 27001 or SOC 2 control requirements.
- Relevant cloud, networking or cybersecurity certifications.
Full description
Salary: $90,000 – $110,000 per year
Senior Cloud Security Engineer – Cloudflare, WAF & API Security
Company: BMP Tec One PtY Ltd
Location: Sydney, NSW
Employment type: Full Time
Key selling points
- Deliver hands-on cloud and application security engineering.
- Build security tooling using Cloudflare Workers, JavaScript and Python.
- Collaborate with enterprise application, infrastructure and security teams.
About BMP Technologies
BMP Technologies provides technology consulting and delivery services to clients across Australia and New Zealand, supported by onshore and offshore teams. Our capabilities include cloud engineering, cybersecurity, software development, DevSecOps and managed services.
About the role
We are seeking a Senior Cloud Security Engineer to design, develop, implement and support cloud and edge security solutions.
Working closely with application developers, architects and infrastructure teams, you will protect enterprise applications and APIs, develop security automation and improve the effectiveness of security controls. This role combines hands-on engineering with troubleshooting, technical documentation and stakeholder collaboration.
Key responsibilities
- Design, implement and maintain Cloudflare security services, including WAF, bot protection, rate limiting and API security.
- Develop and support Cloudflare Workers for secure request handling, proxy services and custom security controls.
- Build and integrate security applications, diagnostic tools and automation using JavaScript, TypeScript or Python.
- Configure and tune managed and custom WAF rules to mitigate threats while reducing false positives.
- Implement and support Zero Trust access controls in collaboration with identity and infrastructure teams.
- Analyse application traffic, security logs and API behaviour to investigate threats and resolve security issues.
- Test and validate security controls before deployment, including regression testing, rollback planning and operational verification.
- Integrate security telemetry with SIEM and monitoring platforms.
- Collaborate with developers to remediate vulnerabilities and strengthen application and API security.
- Maintain technical designs, configuration documentation, deployment procedures and operational runbooks.
- Support incident investigation, service resilience and continuous improvement.