Cloud Security Engineer

• Define and implement the cloud security framework in collaboration with IT systems, SOC leadership, and GRC
• Recommend security best practices and implement controls for cloud security and governance
• Implement automated security tooling to validate security requirements and identify potential issues
• Define threat detection and incident response processes and playbooks for cloud environments
• Collaborate with the SOC to operationalize detection rules and incident handling
• Support GRC in meeting evidence and compliance requirements for ISO27001, NCSC Cloud Security Principles, and SOC2
• Review outputs from security tools and practices, filtering and prioritizing them into actionable security stories for delivery teams
• Influence and guide junior engineers and developers to adopt secure practices
• Upskill and train the wider security team in cloud security topics and tooling
• Provide input into IAM strategy and policy (RBAC, Conditional Access, MFA, least privilege) in collaboration with IT and systems teams

Technologies:

• AWS
• Azure
• Bash
• Cloud
• CloudWatch
• IAM
• Support
• Network
• PowerShell
• Python
• RBAC
• Security
• Terraform
• CI/CD, We are seeking a mid-level Cloud Security Engineer to join our Security Engineering team. This role is the first dedicated hire for cloud security within our organization and will be critical in defining, implementing, and managing security controls across our Azure, AWS, and SaaS environments. The successful candidate will work independently, reporting to the Head of Security Engineering, while collaborating with SOC, GRC, IT, Modern Workplace, and Systems Engineering teams to build and mature our cloud security posture.

• Previous experience in cloud security engineering or related roles
• Working knowledge of industry cloud security frameworks and best practices (CSA STAR, NCSC Cloud Security Principles)
• Experience with automation and scripting (Python, PowerShell, Bash)
• Proficiency with Azure security services: Defender for Cloud, Entra ID, Sentinel etc.
• Proficiency with AWS security services: Security Hub, GuardDuty, IAM, Config, CloudTrail, CloudWatch
• Working knowledge of cloud incident response processes and procedures
• Strong understanding of security best practices in multi-cloud environments
• Familiarity with Infrastructure as Code (Terraform) (optional)
• Knowledge of cloud network security concepts (firewalls, NSGs, VPCs, private endpoints) (optional)
• Exposure to compliance frameworks (ISO27001, SOC2, NCSC Cloud Security Principles) (optional)
• Security certifications such as AZ-500, SC-100, AWS Security Specialty, CISSP, or CCSK (optional)