(Senior) AWS Cloud Security Engineer d/f/m

Das ist der Job

We value innovation, collaboration, and continuous improvement.

Darum lohnt es sich

RWE Supply & Trading GmbH To start as soon as possible, full time / part time, permanent Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer. You will help secure, evolve and operate the AWS platform that teams across RWE Supply and Traiding GmbH (RWEST)rely on to build and run business-critical applications.

Working closely with platform engineers, application teams and security specialists, you will embed security into our cloud foundations, operating model and shared platform services.

You will support teams in identifying and remediating risks, integrate security controls into the platform, improve vulnerability and configuration management, and help shape secure cloud practices that are practical, scalable, and aligned with RWEST’s Security Engineer pathway.

About the role • Design, implement, and improve security controls for AWS platform services. • Translate security requirements into reusable platform patterns, guardrails and operational controls that teams can adopt consistently. • Review AWS architectures, permissions, configuration settings and deployment approaches to identify weaknesses and recommend pragmatic remediations. • Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents. • Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services. • Work closely with application teams, platform engineers and security stakeholders to embed security from the start.

Job requirements and experience • Strong hands-on experience securing and operating AWS environments at scale, with a solid understanding of AWS security architecture, shared responsibility principles and cloud-native security controls. • Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation. • Knowledge of SSDLC practices and threat modelling. • Ability to review cloud architectures and technical designs from a security perspective. • Understanding of authentication and authorization patterns. • Strong communication and collaboration skills, with the ability to translate security requirements into clear guidance for application teams. • Curiosity and continuous learning mindset, including interest in AI-assisted security operations, intelligent automation, and responsible use of emerging technologies.

Your benefits • Modern company culture with flat hierarchies and strong team spirit. • Diverse team with opportunities for continuous learning and development. • Innovative environment in a dynamic, growing energy market. • High potential DevOps team with strong management support. • Agile setup working on impactful projects. • Excellent compensation and benefits package, including retirement plans and performance bonuses.

A diverse team of over 2,300 professionals from around 90 countries trades electricity, gas, commodities, and CO2 emission allowances. As an AWS Cloud Security Engineer, you will act as a bridge between application delivery, and security departments.

Your focus will be to ensure that AWS services, platform patterns, infrastructure as code, CI/CD pipelines, identity and access controls, monitoring, and security tooling are designed and operated securely from the start.

Advantageous, but not essential • Experience in governing large multi-account AWS environments. • Relevant professional certifications such as AWS Certified Security – Specialty, AWS Solutions Architect, CISSP, CCSP or comparable qualifications. • Experience with AWS security services and platform capabilities. • Familiarity with security frameworks and standards such as CIS Benchmarks, NIST, ISO 27001 or AWS Well-Architected Security Pillar. • Experience working in a regulated, financial, energy or other business-critical technology environment. • Experience applying AI-assisted tools safely for code review, vulnerability triage, log analysis, anomaly detection, documentation, or security automation. • Academic degree in cyber security, computer science, or a comparable field. • Proficiency in spoken and written German.

RWE is committed to creating a diverse and inclusive environment – we value your passion, your willingness to learn and your desire to thrive. Even if you don't have all the above skills, need flexible working arrangements or other adjustments not yet listed here, we'd love to hear from you.

We value diversity and therefore welcome all applications - regardless of gender, disability, nationality, ethnic and social origin, religion/belief, age, sexual orientation, and identity. #inclusionmatters We look forward to meeting you. Of course, you can find us on LinkedIn, Instagram, Facebook, YouTube and Xing, too.

RWE Supply & Trading is our connection to the world’s energy markets. Headquartered in Essen, Germany, the company operates one of Europe’s largest and most advanced energy trading floors.

With precise market analysis and a strong customer focus, we create innovative energy supply solutions and tailored risk management concepts for industrial clients. We also ensure the commercial optimisation of RWE’s power plant portfolio and market the electricity generated by RWE.

In addition, legally independent RWE gas storage companies operate in Germany, contributing to a secure energy supply.