Cloud & AI Security Engineer Lead

Norton Rose Fulbright LLP; Greater London; On-site; GBP 90,000 - 125,000; Full time

Job summary

Norton Rose Fulbright LLP is seeking a Senior Information Security Engineer to secure cloud platforms, AI solutions and identities across Azure, GCP, and SaaS. The role combines hands-on security engineering with governance, aiming to improve posture, incident response, and automation for scalable risk-based controls.

The candidate will work with architects, developers, and service owners to apply secure-by-design principles, monitor threats, and provide clear risk-based recommendations to

Qualifications

• At least 5 years in cloud security, security engineering, cloud architecture, DevSecOps, or related technical discipline.
• Hands-on experience securing Azure and GCP in large/complex environments.
• Knowledge of IAM, workload identities, privileged access, federation, and least-privilege design.
• Experience with cloud security posture management, vulnerability management, and risk-based remediation.
• Experience defining or evaluating security controls for AI/ML platforms or AI-enabled SaaS.

Responsibilities

• Define and improve security controls across Azure, AWS, cloud-native services, and SaaS platforms.
• Lead cloud security assessments and define secure architecture patterns.
• Embed security into cloud engineering and delivery practices with guardrails.
• Own cloud security posture, remediation tracking, and governance integration.
• Perform security reviews of cloud solutions, APIs, IaC, and changes.
• Create KPIs, dashboards and executive summaries of cloud/AI risk.

Skills

Cloud security

Security engineering

Cloud architecture

DevSecOps

PowerShell

Python

KQL

Identity & access management

Threat modelling

Security governance

Tools

PowerShell

Python

KQL

APIs

Infrastructure-as-code

Job description

Norton Rose Fulbright LLP is seeking a Senior Information Security Engineer to secure cloud platforms, AI solutions and identities across Azure, GCP, and SaaS. The role combines hands-on security engineering with governance, aiming to improve posture, incident response, and automation for scalable risk-based controls.

The candidate will work with architects, developers, and service owners to apply secure-by-design principles, monitor threats, and provide clear risk-based recommendations to