Join the Revolution

About AllCloud

AllCloud is a leader in amplifying organizations’ cloud potential through AI. With a track record of hundreds of successful migrations and implementations across AWS and Salesforce, AllCloud has developed strategies and solutions that enable businesses of all sizes to remain at the forefront of innovation.

AllCloud is a leader in AI-led professional and managed services. As an AWS Premier and audited managed services Partner, and Salesforce Consulting partner, AllCloud provides comprehensive AI-led cloud journey support, from initial migration to ongoing management through our Engage Managed Services. Our expertise ensures that clients remain aligned with ecosystem best practices while focusing on their core business growth.

AllCloud serves clients across the globe with offices in EMEA and North America. www.allcloud.io

Job Summary

This is a customer-facing engineering role, and the customer-facing half is not optional or secondary. You will lead technical engagements directly: running recurring security reviews, presenting findings to both engineering teams and executive stakeholders, defending your recommendations, and driving remediation that the customer can realistically staff and fund.

You'll pair that with hands-on ownership of detective controls, guardrails, and incident response across the customer portfolio. You build the thing, and you explain the thing to the person paying for it.

You'll also be the technical authority behind our global SOC. They run the shifts; you make sure what they know is right.

Responsibilities

• Own client technical relationships, lead executive/developer security reviews, build prioritized remediation roadmaps, and communicate hard architectural risks directly.
• Deploy and tune AWS native tools (GuardDuty, Security Hub, Config, Inspector, CloudTrail) and Wiz; manage telemetry flowing into Datadog.
• Serve as the escalation authority for the SOC team, keeping playbooks updated and tuning detection logic to eliminate false positives.
• Lead investigations (timeline, root cause, executive reporting) and develop reusable Python/boto3 scripts for enrichment and containment.
• Architect security guardrails (SCPs, IAM, network policies) using Terraform or CDK; manage AWS LZA, Identity Center, and automated remediation pipelines.

What's genuinely different about this role.

We'd rather you hear this from us than discover it in a month or two.

• Context switching is the job. You'll move between customer environments with different architectures, different maturity, and different definitions of "urgent."
• You work through other people's accounts. Cross-account role design, delegated administration, and access boundaries are core skills here, not an afterthought. Getting access right for us is itself a security control we owe the customer.
• You don't get to know one estate deeply. The compensating skill is pattern recognition: spotting the same misconfiguration across ten different architectures.
• The customer is often the constraint. You'll regularly recommend something correct that the customer declines or defers. Learning to document that disagreement, and to keep advocating without becoming an obstacle, matters more here than in an in-house role.