> Markdown version of [/jobs/ext/78324-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/78324-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** Healthhero - **Location:** Bristol, UK - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Kubernetes Security, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Data Governance, HP Systems Insight Manager, Identity and Access Management, Integrated Development Environments, Key Management, Network Security, Network Segmentation, Systems Development Life Cycle, Secure Coding, Security Software, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Data Logging, Cloud Platform System, Software Security, Kubernetes, Enterprise Integration, Terraform, Devsecops, Static Application Security Testing, Dynamic Application Security Testing - **Published:** May 18, 2026 - **Apply:** https://www.careerjet.co.uk/jobad/gb1393dbe3ae31984f0133a38e9f277c31 ## About the Role Essential * Proven experience in application security, DevSecOps, or cloud security * Strong understanding of cloud networking * Experience securing cloud environments (AWS, Azure) * Ability to read and write IAC (Terraform) code, comfortable with IAC lifecycles * Familiarity with container security and Kubernetes * Understanding of secure coding, penetration testing techniques, SIEM, and vulnerability management * Strong technical skills relevant to Information Security such as secure coding standards, ethical hacking techniques, network security and risk analysis * Understanding of managing Secure Development Lifecycle and Vulnerability Management. * Understanding and practical experience of ISO27001:2022 controls and audit processes Desirable * AWS Security Specialty or similar certification * Experience in regulated environments (healthcare, financial services) * Familiarity with NHS DSPT * Technical knowledge of GDPR and data protection requirements * Hands-on with CI/CD security tooling and pipeline integration * Interest in learning other countries health and security regulations (France / UK / IR / DE) ## Description We are HealthHero, Europe's largest digital clinic. Join us at a pivotal moment as we scale our digital healthcare platform across Europe - giving you the chance to shape security at the heart of a fast-growing, AI-driven business. We are recruiting an exciting Senior Cloud Security Engineer on an initial 12 month fixed term contract, with a view to becoming permanent - based in either our London or Bristol office two days per week. About the role This role will form a fundamental part of a growing PlatformSecurity function, where the team covers application security, cloud security, security operations, culture and risk management. As a tech-centric organisation the Information Security team will play a critical part in embedding a security-first mindset into application development and continuous application monitoring. This role will co-own the cloud security posture and tooling across HealthHero's AWS and Azure estates and have the opportunity to tackle cloud security with an international scope. The role will be supported by a multidisciplinary force of Infrastructure, Data Governance and Engineering team leads with a security focus as part of their remit. The role has a focus on infrastructure and cloud networking when it comes to security posture. As an experienced Cloud Security Engineer, your working day will include but not be limited to: DevSecOps & SDLC * Champion integration of security testing into CI/CD pipelines across all development teams and usage of automated security gates: SAST, DAST, dependency scanning, secrets detection * Enable self-serve security tooling for development teams * Ability to set up development environment Cloud Security * Own cloud security posture management using Wiz (or similar CSPM) Define and enforce cloud security baselines, guardrails, and policies in AWS * Implement and maintain IaC security scanning for Terraform * Manage IAM policies, network segmentation, and secrets management * Configure and tune SIEM (or similar) for cloud-focused detection * Establish logging, monitoring, and alerting requirements based on threat modelling * Investigate and respond to cloud security events Risk & Compliance * Identify, articulate, and escalate security risks to senior leadership with mitigation plans * Track and remediate vulnerabilities across infrastructure * Manage customer initiatives related to due diligence when required to * Support and develop annual programme of Penetration Testing and associated remediations Stakeholder Engagement * Partner with internal and stakeholder management to support any requirements from the security function - particularly governance and accreditation requirements across different countries * Provide expertise on emerging threats and vulnerabilities * Support response to customer/client due diligence requests with timely and accurate information regarding vulnerability exposure ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)