> Markdown version of [/jobs/ext/4612400-senior-cloud-security-consultant](https://www.wearedevelopers.com/jobs/ext/4612400-senior-cloud-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Security Consultant - **Company:** Aon plc. - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Access, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Remote Backup Services, Microsoft Online Services, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Continuous Integration, Disaster Recovery, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Key Management, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Aws Command Line Interface (CLI), Kusto Query Language, Security Information and Event Management, Data Logging, Cloud-native Network Functions (CNF), Google Cloud, Cloud Monitoring, Multi-Cloud, Azure Powershell, Firewalls (Computer Science), Cloudformation, National Institute of Standards and Technology Cybersecurity Framework, Bicep, Microsoft Sentinel, Cloud Migration, CIS Benchmarks, Cloudwatch, Terraform, Devsecops - **Published:** November 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a00f960afa0fe38a ## About the Role * Demonstrable experience in cloud security engineering, cloud architecture, security consulting or a related technical role. * Strong, hands-on knowledge of Microsoft Azure and AWS, including technical set-up, tenancy/account structure and security architecture. * Experience crafting, implementing or assessing one or more of the following: * Identity and access management (Entra ID, AWS IAM, PIM/PAM, conditional access, federation and SSO) * Landing zones, management groups, AWS Organizations and guardrails (Azure Policy, SCPs) * Cloud network security and hybrid connectivity * Cloud security posture management and workload protection (CSPM/CWPP/CNAPP) * Logging, monitoring and threat detection (Sentinel, Defender, GuardDuty, CloudTrail) * Encryption, key and secrets management * Container and Kubernetes security (AKS, EKS) * Infrastructure-as-code (Terraform, Bicep/ARM, CloudFormation) and DevSecOps * Cloud backup, resilience and disaster recovery * Familiarity with one or more of the following frameworks and guidelines: * CIS Benchmarks for Azure and AWS * Microsoft Cloud Security Benchmark * AWS and Azure Well-Architected Frameworks (Security Pillar) * Cloud Adoption Frameworks * NIST CSF * ISO 27001 / 27017 * CSA Cloud Controls Matrix * Understanding of attack paths and common cloud attack techniques (e.g. privilege escalation, misconfiguration exploitation, credential compromise), and how they impact critical business assets. * Ability to read and interpret cloud configuration exports, scripts and tooling outputs (e.g. PowerShell, Azure CLI, AWS CLI, KQL). * Experience identifying and assessing cloud and cyber risks within complex environments, with the ability to communicate technical findings and business implications to both technical and non-technical stakeholders. * Strong analytical and problem-solving skills. * Commercial awareness and the ability to understand business implications of technology and security decisions. * Excellent written and verbal communication skills with the ability to convey complex technical concepts to non-technical audiences. Team & Client Management * Experience managing technical workstreams and contributing to successful project delivery. * Strong stakeholder management and presentation skills. * Ability to engage effectively with both technical teams and senior business executives. * Experience developing positive client relationships. * Comfortable working within multidisciplinary and global teams and fast-paced consulting environments. * Ability to manage multiple engagements and competing priorities. * Highly organised with strong attention to detail and quality. Highly Desirable * Experience with Google Cloud Platform or multi-cloud environments. * Exposure to attack path analysis, exposure management or cyber risk quantification platforms. * Experience of cloud penetration testing, red teaming or security assurance reviews. * Experience supporting cloud migrations, tenant-to-tenant migrations or separation/integration programmes. * Industry-recognised certifications, such as: * Microsoft Certified: Azure Security Engineer Associate (AZ-500) * Microsoft Certified: Cybersecurity Architect Expert (SC-100) * AWS Certified Security - Specialty * AWS Certified Solutions Architect * CCSP * CISSP * CCSK * Experience working with private equity-backed businesses or large corporate organisations. * Experience mentoring junior team members or supporting team development initiatives. * Interest in business development and market-facing activities. Experience or interest in line management. * Interest in supporting client relationship management. ## Description Your impact as a Senior Cloud Security Consultant: You will be responsible for leading the cloud security elements of engagements across private equity and corporate clients, including: * Leading technical cloud security reviews of Azure and AWS environments as part of cyber due diligence, technical review and portfolio company engagements. * Assessing cloud tenancy and account architecture, including Azure management groups, subscriptions and landing zones, and AWS Organizations, accounts, OUs and Control Tower set-up. * Reviewing identity and access management across cloud and hybrid environments, including Microsoft Entra ID, AWS IAM and IAM Identity Center, privileged access, role-based access control, conditional access, MFA, service principals and workload identities. * Evaluating cloud network architecture and segmentation, including VNets/VPCs, security groups, firewalls, private endpoints, internet exposure and hybrid connectivity. * Assessing cloud security configuration and posture using native and third-party tooling (e.g. Microsoft Defender for Cloud, AWS Security Hub, GuardDuty, CSPM/CNAPP platforms) against CIS Benchmarks and Well-Architected security guidance. * Reviewing data protection controls, including encryption, key management (Azure Key Vault, AWS KMS), secrets management, storage exposure and backup resilience. * Assessing logging, monitoring and detection capabilities, including Azure Monitor, Microsoft Sentinel, AWS CloudTrail, CloudWatch and integration with SOC/SIEM services. * Reviewing infrastructure-as-code, DevSecOps practices and CI/CD pipeline security where relevant. * Translating technical findings into prioritised, commercially relevant risks, remediation roadmaps and cost estimates for investors and management teams. * Producing high-quality reports, presentations and executive briefings. * Managing technical workstreams and supporting engagement delivery across multiple concurrent projects. * Working closely with colleagues across technology, cyber, M&A and risk advisory disciplines. * Contributing to the development of the team's technical review methodologies, cloud assessment tooling and market offerings. * Supporting client engagements across the UK and EMEA., * Delivering high-quality, technically robust cloud security reviews for private equity and corporate clients. * Acting as the go-to cloud security expert across engagements. * Building trusted relationships with client technology, security and business stakeholders. * Providing insightful, commercially relevant recommendations that support investment and operational decision-making. * Contributing to the growth and development of the Digital M&A Advisory practice and its technical capabilities. * Supporting the development of junior colleagues and improving team capabilities.