Cloud Security Engineer

Introduction

As a Cloud Security Engineer at Curios you secure our clients’ cloud estates across AWS, Azure, Google Cloud and Oracle Cloud. This is the cloud role in our engineering team — our Security Engineer covers platform and identity, and our Network Security Engineer covers network infrastructure. It is client-facing consultancy work across Belgian and international organisations, so you will advise and communicate directly with client teams in Dutch and English.

What you’ll do

• Configuration and posture review (CSPM) across AWS, Azure, Google Cloud and Oracle Cloud
• Identity and access review — IAM and Zero Trust policy
• Workload and container security, and cloud-native detection and response
• Architecture and compliance review — Secure-by-Design and the shared responsibility model, with threat modelling
• Report to two audiences — a board-ready summary plus a technical appendix — with a prioritised remediation roadmap and a 30-day revalidation

What we’re looking for

Must have

• At least 2 years in cloud or security engineering
• Hands-on experience with at least one major cloud (AWS, Azure, GCP or Oracle Cloud)
• A working understanding of cloud IAM, network and workload security
• Familiarity with Secure-by-Design and the shared responsibility model
• Professional working proficiency in Dutch and English — you’ll work with Belgian clients in both

Nice to have

• AZ-500 or an equivalent cloud security certification
• Experience with CSPM tooling and cloud-native detection and response

What we offer

• A training and certification budget. We’re a team of 48+ certifications and we intend to keep it that way — your next certification is part of the job, not something you fit around it.
• A competitive salary with a 13th month, plus a net expense allowance on top.
• A company car and fuel card — you’ll be moving between client sites, home and our Antwerp office.
• Meal vouchers and eco-vouchers.
• Hospitalisation insurance.
• Phone and laptop.
• A 40-hour week with 12 ADV days, on top of your statutory holiday.
• Hybrid working — home, client sites and the Antwerp office.
• Consultancy work with real variety — Belgian and international organisations, across strategy and hands-on technical work.

About Curios

We’ve done cybersecurity, and only cybersecurity, since 2017. We’re a Belgian firm working across Europe, with 48+ certifications across the team and published CVEs in enterprise software. Client work is delivered by senior specialists — no juniors on client engagements — pairing board-level advisory with hands-on technical depth.

How to apply