> Markdown version of [/jobs/ext/4712342-cloud-security-engineer-contract](https://www.wearedevelopers.com/jobs/ext/4712342-cloud-security-engineer-contract). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer (Contract) - **Company:** Atreides - **Location:** United Kingdom - **Salary:** £68,004 - **Contract:** Permanent contract - **Skills:** Access Network, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Encodings, DevOps, Identity and Access Management, Python (Programming Language), Microsoft Security Essentials, Microsoft Software, Open Web Application Security, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Security Information and Event Management, Software Technical Review, Software Vulnerability Management, Cloud-native Network Functions (CNF), Delivery Pipeline, Software Security, Mitre Att&ck, Firewalls (Computer Science), Kubernetes, Bicep, Microsoft Sentinel, CIS Benchmarks, Terraform, Devsecops, Static Application Security Testing, Vulnerability Analysis, Microservices, Dynamic Application Security Testing - **Published:** November 14, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5965568650 ## About the Role * Proven experience in dedicated security engineering roles, ideally in cloud-first environments, built on a strong foundation in infrastructure, network, software or DevOps engineering. * Hands-on experience securing cloud infrastructure and services in Microsoft Azure using native Azure security tooling, with working knowledge of vulnerability management, patching and endpoint protection. * Experience with identity and access management in Microsoft Entra ID, including designing and managing Conditional Access policies, Privileged Identity Management (PIM) and role-based access control to enforce least privilege and strong authentication. * Strong understanding of cloud network security, including segmentation, firewalls, WAFs and zero-trust network access (ZTNA), and of infrastructure hardening (e.g. CIS Benchmarks). * Practical experience embedding security into development lifecycles and CI/CD pipelines, including design and code reviews and automated pipeline security scanning. * Proficiency in scripting and automation (PowerShell, Python) and Infrastructure-as-Code (Bicep, Terraform). * Knowledge of securing cloud-native, microservice and containerised systems, including container orchestration platforms. * Solid understanding of security principles, common attack techniques and frameworks (e.g. OWASP Top 10, MITRE ATT&CK) and the threat landscape. * Strong delivery focus, able to prioritise effectively and deliver outcomes in a fast-paced environment with shifting demands. * Clear communicator, able to explain security risk to both technical and non-technical stakeholders and influence engineering teams. Desired Qualifications and Experience * Microsoft security certifications, such as SC-500, SC-300 or SC-200. * Industry-recognised cloud security certifications, such as GIAC GCSA or GPCS, or ISC2 CCSP. * Hands-on experience deploying and operating zero-trust network access (ZTNA) solutions. * Experience with SIEM platforms (Microsoft Sentinel preferred), including tuning detections, triaging alerts and responding to threats using established runbooks and procedures. * Experience producing security documentation and supporting assurance activities in regulated environments. * Application security experience, including threat modelling and application security testing (SAST/DAST). ## Description Position Overview: Atreides are seeking a motivated and proactive Cloud Security Engineer to join our dynamic and growing security team. Reporting to the Lead Security Architect, you will build, secure and operate zero-trust cloud environments, with a strong focus on Microsoft Azure and DevSecOps practices. This is a broad, hands-on engineering role suited to a platform security engineer or DevSecOps professional who enjoys working across the stack, from identity, Infrastructure-as-Code and CI/CD pipelines to detection, response and vulnerability management., * Implement and support security controls across Azure, Microsoft Entra ID and the wider Microsoft stack, including Microsoft Defender for Cloud, Microsoft Defender XDR and Azure Policy. * Apply zero-trust principles and harden infrastructure and applications against recognised standards (e.g. CIS Benchmarks), enforcing them through policy-as-code. * Secure containerised workloads throughout their lifecycle, from image hardening and runtime configuration to isolation between services. * Build and run security gates in DevOps pipelines that scan Infrastructure-as-Code (Bicep/Terraform), dependencies, secrets and container images, and produce auditable evidence. * Develop security automation to improve efficiency, including policy enforcement, remediation and reporting, using scripting (PowerShell, Python) and Infrastructure-as-Code. * Review designs and code early, challenge weaknesses, advise on fixes and feed security findings into change approval without slowing delivery. * Triage vulnerability and misconfiguration findings, prioritise them by exposure and support owning teams through patching and remediation. * Tune Microsoft Sentinel detections, investigate alerts and support incident response, following and improving playbooks and preserving evidence in line with defined procedures. * Write and maintain security documentation, including control designs, hardening guides, SyOPs and runbooks, and provide evidence to support assurance activities.