AI-Driven Cloud Security Engineer (Remote UK)

Vesta Software Group; United Kingdom; Remote; GBP 55,000 - 90,000; Full time

Job summary

Vesta Software Group is seeking a Cloud Security Engineer to protect Azure and cloud workloads from design to delivery. You will automate secure configurations, manage secrets, and lead vulnerability remediation while aligning with AI-enabled security practices.

The role emphasizes evidence-led risk management and collaboration with cross-functional teams. The position requires hands-on cloud security in production, strong IAM, networking, and incident response capabilities, plus experience with

Qualifications

• Hands-on experience securing Azure or another major cloud platform in a production environment.
• Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response.
• Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation.
• Experience with scripting, policy-as-code, infrastructure automation or security automation.
• Understanding of secure development and deployment practices, including secrets and pipeline security.
• Clear documentation and communication of technical risk to different audiences.

Responsibilities

• Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.
• Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production.
• Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation where appropriate.
• Support secrets, key, certificate, privileged-access and service-account lifecycle management.
• Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures.
• Prioritise remediation using exploitability, exposure, business impact and compensating controls rather than severity labels alone.
• Support security incident response, evidence preservation, root-cause analysis and completion of corrective actions.
• Maintain clear security findings, owners, due dates, exceptions and risk acceptance records.
• Threat model AI-enabled services and operational agents, including data leakage, prompt injection, over-permission, unsafe actions, supplier risk and inadequate human oversight.
• Use approved AI tools to support security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data.
• Work with R&D and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns.
• Define and test guardrails for AI access to production systems, credentials, logs and customer information.
• Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity.
• Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working.
• Report material risks and trends clearly to the Cloud Operations Manager, Compliance Manager and relevant owners.

Skills

Azure security

Kubernetes security

Identity & access management

Networking

Vulnerability management

Scripting / IaC

Secure SDLC / DevSecOps

Incident response

Tools

Terraform

Puppet/Ansible

CI/CD tooling

Job description

Vesta Software Group is seeking a Cloud Security Engineer to protect Azure and cloud workloads from design to delivery. You will automate secure configurations, manage secrets, and lead vulnerability remediation while aligning with AI-enabled security practices.

The role emphasizes evidence-led risk management and collaboration with cross-functional teams. The position requires hands-on cloud security in production, strong IAM, networking, and incident response capabilities, plus experience with