> Markdown version of [/jobs/ext/3879588-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/3879588-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer

- **Company:** THE OPPORTUNITY HUB UK LTD
- **Location:** Newcastle upon Tyne, UK
- **Salary:** £52,500.0 - £64,500.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Identity and Access Management, Python (Programming Language), Network Segmentation, Security Information and Event Management, Scripting, Cloud Platform System, Cloudformation, Infrastructure Automation Frameworks, CIS Benchmarks, Terraform
- **Published:** October 23, 2026
- **Apply:** https://www.jobs.service.gov.uk/jobs/6adb0b4acde5c8a238bc8df3/apply

## About the Role

Several years' hands-on experience securing cloud infrastructure, with solid knowledge of at least one major provider

Comfortable with infrastructure-as-code tools (Terraform, CloudFormation) and scripting (Python or similar)

Understanding of common frameworks such as CIS benchmarks, NIST or ISO 27001

Experience with SIEM tools and incident response processes

Able to explain technical risk to non-technical colleagues without losing the detail that matters

Comfortable working independently and switching priorities as the business moves

## Description

Cloud infrastructure keeps expanding and so does the attack surface that comes with it. A fast-growing cybersecurity startup is looking for a Cloud Security Engineer to help build protection into systems from the ground up, not bolt it on afterwards. This is a company built around a flat structure and genuine ownership, where a Cloud Security Engineer can shape how security actually gets done rather than just following someone else's playbook.

Here's what you'll be doing:

Design and maintain security controls across cloud environments (AWS, Azure or GCP), covering IAM, network segmentation and encryption

Build and tune automated detection rules to catch misconfigurations and threats before they become incidents

Run security reviews on new infrastructure and application deployments before they go live

Investigate alerts, lead incident response when things go wrong, and write up what happened afterwards

Work closely with engineering to bake security into CI/CD pipelines rather than treating it as a final checkbox

Keep policies, runbooks and compliance documentation current as the environment grows