Cloud Security Engineer

We’re looking for a hands-on Cloud Security Engineer to help drive security across our AWS, Azure and GCP environments.

This role combines cloud security engineering, automation, governance and DevSecOps. You’ll design and implement security controls, build automation that scales, and work closely with engineering teams to embed security into everything we do.

If you enjoy solving complex security challenges, automating manual processes and improving cloud security at scale, we’d love to hear from you.

What You’ll DoCloud Security

• Design and implement secure-by-design cloud solutions.
• Define and maintain cloud security standards, controls and guardrails.
• Identify, assess and remediate cloud security risks and vulnerabilities.
• Support governance across AWS, Azure and GCP environments.

Security Engineering & Automation

• Build and maintain security automation using Terraform, GitLab CI/CD, Python and PowerShell.
• Develop Infrastructure-as-Code controls and automated compliance checks.
• Automate security monitoring, validation and remediation activities.
• Support the integration of security throughout the software delivery life cycle.

Security Operations

• Manage and optimise security tooling including:
• Microsoft Defender for Cloud
• AWS Security Hub, GuardDuty and Inspector
• Qualys
• Snyk
• SonarQube
• DRATA
• GitLab
• Bitwarden
• Support threat detection, investigations and vulnerability management.
• Conduct cloud security reviews and recommend improvements.

Identity & Access Management

• Implement and maintain least-privilege access models.
• Manage AWS IAM, IAM Identity Center, Microsoft Entra ID, RBAC and PIM.
• Support privileged access governance and access life cycle management.

Compliance & Assurance

• Support compliance programmes including ISO 27001, SOC 2 and Cyber Essentials Plus.
• Assist with audits, evidence collection and remediation activities.
• Work with customers and stakeholders to meet security and compliance requirements.

• Experience securing cloud environments in AWS, Azure and/or GCP.
• Strong hands-on experience with Terraform and CI/CD pipelines.
• Knowledge of cloud security platforms such as Defender for Cloud, Security Hub, GuardDuty, Inspector, Qualys or Snyk.
• Experience with Identity and Access Management technologies and principles.
• Scripting or automation experience using Python and/or PowerShell.
• Good understanding of cloud security, DevSecOps and Infrastructure-as-Code practices.
• Experience supporting recognised security or compliance frameworks.
• Strong communication skills and the ability to work with technical and non-technical stakeholders.

Desirable

• Experience within regulated or highly secure environments.
• Exposure to Secure by Design principles.
• Cloud or security certifications across AWS, Azure, GCP, ISC2 or ISACA.
• Experience working within multi-cloud environments.