Senior Cloud Security Engineer (AWS)

FORT
Manchester, UK
11 days ago
Apply on www.collegerecruiter.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours

Tech stack

Java (Programming Language) Artificial Intelligence Amazon Web Services Software System Penetration Testing Microsoft Azure Cloud Computing Cloud Computing Security Encodings Computer Networks Identity and Access Management Information Security Management Python (Programming Language)
+14 more
Key Management OpenShift Role-Based Access Control Azure DevOps Pipelines Policy as Code Scripting Multi-Cloud Gitlab Cloudformation Kubernetes Bicep Hashicorp Terraform Devsecops

Job description

Our client is looking for a Senior Cloud Security Engineer to join a lean team at the start of a critical consolidation of our clients security processes - you will be an essential member of the team assessing the current state of the division, looking to put in place compliance framework and expand across the organisation.

Requirements

  • Multi-Cloud Security: Deep know-how in AWS - any additional cloud experience would also be helpful - Azure, or GCP - covering IAM, cloud networking, encryption, monitoring, and governance.
  • Infrastructure & Policy as Code (IaC): Hands-on practice with Terraform, CloudFormation, ARM/Bicep, and Rego/Open Policy Agent (OPA) for automated guardrails.
  • Containers & Orchestration: Securing Kubernetes or OpenShift, secrets management, Role-Based Access Control (RBAC), and network policies.
  • DevSecOps & Pipelines: Embedding security gates into GitLab or Azure DevOps pipelines and using tools like HashiCorp Vault.
  • Risk & Posture Management: Identifying and fixing cloud vulnerabilities using platforms like Wiz Cloud and Wiz Defend
  • Code & Scripting: Hands on experience working with Python is essential and any Java experience would be desirable.
  • Penetration Testing: Any experience or interest in this side would be preferred.
  • AI: Experience of building AI tools to enhance security proceedures within an enterprise and regulatory environment would be highly desirable.

Culturally we are looking for someone who has a good mind for risk, reliability and someone who is able to thrive within cross-functional collaboration across technology teams.

About the company

An opportunity to work in one of the most forward thinking financial institutions in Great Britain synonmous with being at the technical forefront of the financial services world.

An exciting opportunity has arisen to join one of the most critical teams within the organisation - in their API division which has a far reaching impact on customers - whether b2c or b2b.

The Why? (TOP 3 as we could put far more in there!)

  • Work for a business that has global impact and purpose - here your work touches on various aspects of the global economy providing opportunties for yourself to work on projects with international significance.
  • Career development & growth is critical with the organisation boasting one of the best workplaces and evidence of progressing engineers into senior leadership roles within the bank.
  • Our client is recognized as a trialblazer when it comes to technical innovations within the banking world being one of the first to transform customer experience., FORT - Future of Recruiting Technologists is a technical & IT search consultancy specialising in placing experienced professionals & teams with leading technology companies in the North of England.

We strive to provide candidates with the most transformative opportunities available. For our clients, we know technical expertise alone doesn’t make the best hire-so we focus on cultural and technical fit through deep understanding of each business and delivery need.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.collegerecruiter.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:15 min

Key lessons learned from implementing automated mobile DevSecOps

Moataz Nabil Moataz Nabil · LIVE

6:14 min

Structuring CI/CD pipelines with integrated security and quality checks

Christoph Ruggenthaler · LIVE

2:56 min

Provisioning a secure container infrastructure with Bicep

Matthias Falkenberg +1 · World Congress 2022

6:13 min

Defining cloud proficiency by technical role

Piet Van Dongen · LIVE

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

4:54 min

Implementing geographic salary tiers for compensation equity and fairness

Rudi Bauer Rudi Bauer +1 · Cappuccino with HR

Videos

See all

Related articles

See all