AWS Platform Security Engineer

AWS Platform Security EngineerbrWegens grote belangstelling verzoeken wij u snel te solliciteren als u een goede match bent voor deze functie.brpThink like an attacker, build like an engineer, help us find and fix the cracks in our platforms before someone else does. /pbrYour responsibilitiesbrpYou work in an internal and geographically distributed team with cultural diversity, collaborating closely with platform engineers, DevOps teams and product owners across Swisscom. You play a vital role in our agile environment, not just defending the platform, but actively challenging it. /pbrpWith your background in offensive security, you bring a hacker’s mindset to Swisscom’s internal cloud platform. You don’t wait for vulnerabilities to be reported; you go looking for them. Through hands‑on technical assessments, penetration testing and red team exercises you identify weaknesses in iAWS and Swisscom’s AWS Landing Zone, and unlike a traditional pen tester who hands over a report and walks away, you stay involved. Where the fix is within your reach, you own it, writing the code, updating the controls and closing the gap yourself. /pbrpYou act as a trusted security advisor to our internal platform and product teams, guiding them on how to build securely from the ground up. For findings that span multiple teams or require broader platform changes, you work alongside our engineers to drive remediation, providing the technical context, the recommended approach and the hands‑on support needed to get it done properly. /pbrpYou help shape the way we approach security across the ICP ART, from improving our engagement with the SOC, to refining our security processes, to ensuring that the platform we offer to all Swisscom internal DevOps teams is not just functional, but genuinely hardened. You collaborate across multiple teams and solution trains within Swisscom, bridging the gap between offensive security expertise and the day‑to‑day realities of a fast‑moving cloud platform. Thanks to you, security is not an afterthought, it’s built in. /pbrpThis role would be excellently suited to someone who has been doing a lot of offensive security work, but would like to branch out to both advisory and engineering positions without losing all the offensive fun! /pbrTools, services and technologies you’ll usebrullibr/lilibOffensive Security Assessment Tools /bbrullibr/liliPenetration testing tools and methodologies (e.g. Burp Suite, nmap, Metasploit or similar)br/liliCloud‑specific attack frameworks and enumeration tools (e.g. Pacu, ScoutSuite, Prowler)br/liliKubernetes security assessment tools and attack techniques (e.g. kube‑bench, kube‑hunter, Trivy)br/liliVulnerability scanning and red team toolingbr/liliOWASP testing methodologiesbr/li /ulbr/lilibAWS Security Services /bbrullibr/liliCloudWatch, CloudTrail, Amazon Inspectorbr/liliAWS Config, Security Hub, GuardDutybr/liliAWS Shield, WAF, Firewall Managerbr/liliIAM, SCPs, Resource Control Policiesbr/liliAWS Network Firewall, VPC Flow Logsbr/li /ulbr/lilibInfrastructure as Code /bbrullibr/liliCDKbr/liliTerraformbr/li /ulbr/lilibBeneficial Programming / Scripting Languages /bbrullibr/liliPythonbr/liliTypeScript or Java is a plusbr/li /ulbr/lilibWhat we expect /bbrullibr/lili4+ years of experience working with AWS, with a strong focus on securitybr/liliHands‑on experience conducting penetration tests or red team assessments, ideally in cloud environmentsbr/liliA solid understanding of how attacks work and how to defend against thembr/liliExperience working in agile, cross‑functional teamsbr/li /ulbr/lilibNice to have /bbrullibr/liliOffensive security certifications such as OSCP, CRTO, or similarbr/liliAWS security certifications (AWS Certified Security — Specialty)br/liliExperience with SOC processes, threat detection or incident responsebr/liliFamiliarity with compliance frameworks relevant to AWS telco workloadsbr/li /ulbrxgiwjmb br/li /ulbrullibr/liliBachelor’s Degree (B.Sc) with comparable experience in Computer Sciencebr/liliExcellent problem‑solving skills to develop quick and sound solutions that resolve complex issuesbr/liliTeam‑oriented, very adaptable, a flair for continuous improvementbr/liliHigh level of Englishbr/li /ulbrBenefitsbrullibr/liliAgile way of working, multicultural work environment promoting work‑life balancebr/liliAutonomy, flexibility, opportunity and growthbr/liliFull relocation support (housing, settling in, etc.) for you and your familybr/liliTelephone/internet allowance, contribution to health insurance, travel allowance reimbursement, home office allowancebr/lili5 paid training days and access to learning platformsbr/liliGym subscription, tax advice, and language coursebr/liliSalary range: 65,000 to 72,000 euros gross per year including holiday allowancebr/lili25 days paid vacation days plus Dutch national holidays; work from abroad possibility for one month per year; care, bereavement, maternity and paternity leavesbr/li /ulbrContract termsbrullibr/liliFixed‑term contract (one year) with possibility of extension after six months and a feedback meetingbr/liliSalary includes the 8% holiday allowancebr/li /ulbr