Cloud Security Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Implement and uphold security measures across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints, and CI/CD pipelines.

• Evaluate cloud and platform designs, alongside configuration and change proposals, to identify actionable enhancements before risks escalate to production.

• Automate secure configurations, vulnerability assessments, policy compliance checks, evidence gathering, and consistent remediation processes.

• Assist in managing the lifecycle of secrets, keys, certificates, privileged access, and service accounts.

• Monitor security alerts and investigate suspicious activities, vulnerabilities, misconfigurations, and control failures.

• Prioritize remediation efforts based on exploitability, exposure, business impact, and compensating controls.

• Support security incident response, preservation of evidence, root cause analysis, and implementation of corrective measures.

• Keep records of security findings, responsible parties, deadlines, exceptions, and risk acceptance.

• Conduct threat modeling for AI-enabled services and operational agents.

• Utilize approved AI tools for security analysis, query creation, evidence examination, and incident investigation while ensuring output validation and data protection.

• Collaborate with R&D and Data teams to integrate secure-by-design principles into the AI development lifecycle, data flows, APIs, and deployment patterns.

• Establish and test guardrails for AI access to production systems, credentials, logs, and customer data.

• Provide technical evidence and remediation assistance for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR, and customer assurance activities.

• Develop practical standards, runbooks, and guidelines while coaching engineers on secure cloud and AI-enabled operations.

• Report significant risks and trends to the Cloud Operations Manager, Compliance Manager, and relevant stakeholders.

⛳️ Requirements

• Hands-on experience securing Azure or another leading cloud platform in a production setting.

• Practical understanding of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging, and incident response.

• Ability to investigate and prioritize technical security issues and implement or coordinate effective remediation strategies.

• Experience with scripting, policy-as-code, infrastructure automation, or security automation.

• Knowledge of secure development and deployment practices, including secrets management and pipeline security.

• Ability to clearly document and communicate technical risks to various audiences.

• Azure security, Kubernetes security, or recognized cybersecurity certification (desirable).

• Experience with ISO 27001, PCI DSS, Cyber Essentials Plus, or regulated SaaS environments (desirable).

• Experience in threat modeling for AI-enabled systems, APIs, or agentic automation (desirable).

• A strong sense of ownership, sound judgment, and a proactive approach to problem-solving rather than shifting issues between teams.

• Inquisitive and adaptable, with a dedication to continuous learning and responsible AI implementation.

• Systematic, evidence-based problem-solving approach with attention to detail.

• Effective communication with both technical and non-technical team members.

• Collaborative work ethic and a willingness to share knowledge, review others' work, and provide support.

🏝️ Benefits

• Regular Career Site employment.

• 37.5 scheduled weekly hours.