Cloud Security Engineer - Sc Cleared - Inside Ir35

SR2 is seeking two SC-cleared Cloud Security Engineers with deep expertise in AWS GuardDuty to support the delivery of secure and scalable cloud environments for a high-priority central government digital initiative. This role will place you at the centre of cloud-native threat detection and response, with a specific focus on deploying, tuning, and operationalising GuardDuty. You will act as the subject matter expert for integrating GuardDuty across multiple AWS accounts and ensuring that detection capabilities are aligned to threat models, incident response playbooks, and compliance objectives. Key Responsibilities:Act as SME for AWS GuardDuty: deployment, configuration, alert tuning, and integration with downstream response processesWork with platform, architecture, and SOC teams to embed GuardDuty into security operations and agile delivery workflowsDefine detection rules and thresholds aligned to business risk and threat profilesAdvise on triage processes, integration with SIEM tooling, and use of GuardDuty findings for incident investigationSupport wider AWS security efforts including posture management, governance, and compliance monitoringEssential Skills & Experience:Extensive experience in cloud security engineering with a specific focus on AWS GuardDutyStrong understanding of AWS-native security services including IAM, KMS, CloudTrail, Security Hub, Config, and MacieDemonstrable experience in setting up governance frameworks using AWS Config Rules, SCPs, and AWS OrganizationsFamiliarity with automating security controls using Python, Bash, or Infrastructure-as-Code tools (e.G., Terraform)Ability to operate effectively within government or highly regulated environments, and to articulate security risk in contextExcellent documentation and communication skills with experience presenting findings and recommendations to technical and non-technical stakeholdersDesirable:Hands-on experience integrating AWS logs into SIEM platforms (e.G., Splunk, ELK) for correlation and alertingFamiliarity with containerised workloads and security for EKS or similar environmentsRelevant AWS certifications (e.G., AWS Certified Security – Specialty, Solutions Architect)