Cloud Security Engineer (AWS)

Cloud Security Engineer (AWS)

Budapest

Infrastructure and Operations /

Full-time /

Remote

Apply for this job

Founded in 1999 in Vienna, the Qualysoft Group is a manufacturer-independent IT consulting and services company, which successfully provides support for its international customers with the aim of boosting their competitiveness and economic efficiency through innovative IT solutions.

Its focus is on financial services providers, telecommunications companies, the automotive industry and energy service providers. Over 400 employees in 6 subsidiaries work together to ensure state of the art solutions for our clients.

We are looking for new colleagues in Qualysoft teams for diverse projects providing continuous learning opportunities. Our common goal is to provide honesty, development and a stable background while getting to know the latest technologies. We are waiting for your application for the position below!

As a Cloud Security Engineer, you will be responsible for designing, implementing, and maintaining secure AWS environments that support manufacturing automation, retail transactions, and decentralized sales channels. You will work closely with IT, DevOps, and compliance teams to embed security into cloud-native applications and infrastructure, ensuring resilience against evolving threats and alignment with business goals.

Responsibilities:

• Architect secure AWS environments for ERP, POS, inventory management, CRM, and IoT systems.
• Implement and manage AWS security services (IAM, KMS, GuardDuty, Security Hub, CloudTrail) tailored to manufacturing, retail, and direct sales use cases.
• Conduct vulnerability assessments and threat modeling for cloud-hosted production systems, customer-facing platforms, and mobile sales applications.
• Monitor cloud environments for anomalies, unauthorized access, and data exfiltration attempts.
• Automate security controls using Infrastructure as Code (IaC) tools such as Terraform or AWS CloudFormation.
• Integrate security into CI/CD pipelines supporting e-commerce, mobile, and sales enablement platforms.
• Ensure compliance with industry standards (e.g., PCI-DSS, ISO 27001, NIST, GDPR, LGPD) and internal audit requirements.
• Collaborate with OT (Operational Technology) teams to secure cloud-connected industrial systems and with sales operations to protect distributed endpoints.

Requirements:

• AWS Security Expertise: Proficient in configuring and managing AWS services such as IAM, KMS, WAF, Shield, CloudTrail, and GuardDuty.
• Sales Platform Security: Experience securing CRM systems (e.g., Salesforce, HubSpot), e-commerce platforms, and mobile sales applications hosted on AWS.
• Data Privacy & Protection: Strong understanding of data privacy regulations and how they apply to customer data, sales transactions, and lead management.
• Identity & Access Management: Ability to implement granular access controls for distributed sales teams, including federated identity and multi-factor authentication.
• API Security: Familiarity with securing APIs used in sales integrations (e.g., payment gateways, inventory systems, partner portals).
• Threat Detection & Response: Skilled in monitoring for fraud, phishing, and account takeover attempts common in direct sales environments.
• Secure Mobile & Edge Devices: Experience securing mobile endpoints and edge devices used by field agents or distributors.
• Compliance & Audit Readiness: Ability to prepare cloud environments for audits related to financial transactions, customer data handling, and partner onboarding.
• Scripting & Automation: Proficiency in Python, Bash, PowerShell for automating security tasks.
• SIEM & Monitoring: Experience with cloud-native monitoring platforms and SIEM tools for real-time threat visibility.

Advantages:

• AWS Certified Security – Specialty or equivalent certifications.
• Experience with securing IoT devices and edge computing in manufacturing environments.
• Familiarity with container security (EKS, Docker, Kubernetes).
• Exposure to compliance audits (PCI-DSS for retail, ISO/NIST for manufacturing).
• Knowledge of secure software development lifecycle (SSDLC).
• Experience with endpoint protection and mobile device management across distributed retail and sales locations.
• Understanding of DevSecOps principles and tools (e.g., Snyk, Aqua Security).

Why we think you will love working here:

With us you count as a person, our doors are always open.

We live the Qualysoft Team Spirit and stand for transparency!

Fresh wind and new ideas are welcome, because standstill is a foreign word at Qualysoft.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Apply for this job