Cloud Security Engineer

Overview

Vix Technology, a global leader in automatic fare collection, transit information, and transit analytics solutions, is seeking a highly skilled and experienced Cloud Security Engineer. This on-site position is in Manchester and involves collaborating with our Cloud Operations team and the Security team to maintain robust security protocols. You’ll guide technical teams to meet security standards, pass security audits, safeguard company and customer data, and serve as the first point of contact for security incidents.

We are a global organisation that values diversity and invites you to share your perspectives and ideas. This role is based in Manchester, UK, and is open to UK citizens/residents with indefinite leave to remain and current full-time work rights for the United Kingdom.

Responsibilities

• Evaluate and strengthen our overall security posture by performing continuous audits, risk assessments, threat modelling, and architecture reviews to ensure effective controls and regulatory compliance.
• Monitor and assess cloud environments for vulnerabilities and misconfigurations using tools such as AWS Inspector, GuardDuty, and Security Hub; conduct regular vulnerability scanning and penetration testing.
• Design, implement, and automate enterprise-level security systems and controls (IAM, SIEM, DLP, firewalls, endpoint protection, and cloud-native guardrails) across cloud and hybrid environments.
• Actively respond to security events and incidents; lead investigations, coordinate remediation, and drive improvements after incidents.
• Maintain ongoing compliance with security and data privacy standards (e.g., GDPR, ISO 27001, NIST, CCPA) through documentation, policies, and audit readiness.
• Collaborate with global IT, Cloud, and Security Operations Centre teams to protect systems and address challenges.
• Create and present clear, actionable security reports for internal stakeholders and external clients to support assurance activities and contractual obligations.
• Stay informed about emerging threats, tools, and technologies; propose initiatives to enhance security frameworks.
• Advocate secure-by-design principles, integrating security into system architecture, development processes, and operations.

What You’ll Bring To The Role

Essential:

• 3-5 years of experience in Information Security and Cloud Security Engineering, with proven expertise in securing AWS environments (IAM, networking, storage, compute).
• Hands-on experience with networking, infrastructure, and container security (EKS, ECS, Kubernetes) across cloud and on-premises environments.
• Strong understanding of security principles, technologies, and industry best practices, including vulnerability and incident management.
• Experience with security monitoring and protection tools (Firewalls, IDS/IPS, XDR, SIEM, CNAPP) and with log collection platforms (e.g., CrowdStrike, Lacework).
• Experience designing and implementing IAM solutions and maintaining secure authentication practices.
• Proficiency with Windows and Linux systems and network diagnostics (e.g., Wireshark, IP scanner).
• Solid understanding of PKI and encryption fundamentals.
• Excellent collaboration, communication, and organisational skills; able to work independently and in cross-functional teams.
• Ability to handle sensitive information with discretion and professionalism.
• Relevant certifications such as AWS Certified Security - Specialty, CISSP, CCSP, or Terraform Associate (or equivalent experience).

Preferred Qualifications:

• Exposure to threat intelligence and security analytics in cloud environments.
• Bachelor’s degree in Computer Science, Information Technology, or Information Security, or equivalent practical experience.
• Familiarity with PCI, ISO 27001, NIST, and CIS; experience supporting audits and compliance initiatives.
• Understanding of networking protocols, systems architecture, and secure key management (e.g., PCI keys).
• Experience with offensive security techniques, including penetration testing and phishing simulations.
• Programming or scripting skills (Python, Bash, PowerShell) for automation.
• Experience with Infrastructure as Code (IaC) and security implications.

What We’re Looking For

• Proactive, automation-first engineer who embraces security-by-design and follows tasks through to completion.
• Collaborative team player who can also work with minimal supervision.
• Excellent problem-solving abilities and a keen eye for detail.
• Strong communicator with a customer-service mindset and a passion for supporting others.
• Organised, adaptable, and dependable in dynamic environments.
• Commitment to integrity, confidentiality, and ethical conduct.

Benefits

• Learning and development opportunities
• A supportive team of professionals
• Private healthcare
• Income protection, pension, and life assurance
• Cycle to work and electric car schemes
• Employee assistance program and eyecare

To apply, add your resume and any information demonstrating why you would be a great addition to our team.

We are an Equal Opportunity Employer and value diversity. We encourage applications from all qualified individuals.

Job Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Other
• Industries: IT Services and IT Consulting

• 3-5 years of experience in Information Security and Cloud Security Engineering, with proven expertise in securing AWS environments (IAM, networking, storage, compute).
• Hands-on experience with networking, infrastructure, and container security (EKS, ECS, Kubernetes) across cloud and on-premises environments.
• Strong understanding of security principles, technologies, and industry best practices, including vulnerability and incident management.
• Experience with security monitoring and protection tools (Firewalls, IDS/IPS, XDR, SIEM, CNAPP) and with log collection platforms (e.g., CrowdStrike, Lacework).
• Experience designing and implementing IAM solutions and maintaining secure authentication practices.
• Proficiency with Windows and Linux systems and network diagnostics (e.g., Wireshark, IP scanner).
• Solid understanding of PKI and encryption fundamentals.
• Excellent collaboration, communication, and organisational skills; able to work independently and in cross-functional teams.
• Ability to handle sensitive information with discretion and professionalism.
• Relevant certifications such as AWS Certified Security - Specialty, CISSP, CCSP, or Terraform Associate (or equivalent experience)., * Exposure to threat intelligence and security analytics in cloud environments.
• Bachelor’s degree in Computer Science, Information Technology, or Information Security, or equivalent practical experience.
• Familiarity with PCI, ISO 27001, NIST, and CIS; experience supporting audits and compliance initiatives.
• Understanding of networking protocols, systems architecture, and secure key management (e.g., PCI keys).
• Experience with offensive security techniques, including penetration testing and phishing simulations.
• Programming or scripting skills (Python, Bash, PowerShell) for automation.
• Experience with Infrastructure as Code (IaC) and security implications., * Proactive, automation-first engineer who embraces security-by-design and follows tasks through to completion.
• Collaborative team player who can also work with minimal supervision.
• Excellent problem-solving abilities and a keen eye for detail.
• Strong communicator with a customer-service mindset and a passion for supporting others.
• Organised, adaptable, and dependable in dynamic environments.
• Commitment to integrity, confidentiality, and ethical conduct.

• Learning and development opportunities
• A supportive team of professionals
• Private healthcare
• Income protection, pension, and life assurance
• Cycle to work and electric car schemes
• Employee assistance program and eyecare

Vix Technology, a global leader in automatic fare collection, transit information, and transit analytics solutions, is seeking a highly skilled and experienced Cloud Security Engineer. This on-site position is in Manchester and involves collaborating with our Cloud Operations team and the Security team to maintain robust security protocols. You’ll guide technical teams to meet security standards, pass security audits, safeguard company and customer data, and serve as the first point of contact for security incidents.

We are a global organisation that values diversity and invites you to share your perspectives and ideas. This role is based in Manchester, UK, and is open to UK citizens/residents with indefinite leave to remain and current full-time work rights for the United Kingdom.