Cloud Security Engineer

La Fosse Associates; Cambridge; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A leading recruitment firm is seeking a Cloud Security Engineer to strengthen the cloud-native security posture across AWS, Azure, and GCP. The ideal candidate will have 3-5+ years of experience in cloud security operations, strong knowledge of CNAPP tools, and familiarity with compliance frameworks. This is a hybrid position based in Cambridge, offering competitive pay rates.

Qualifications

• 3–5+ years in cloud security operations, engineering, or analysis.
• Solid understanding of Kubernetes security.
• Strong grasp of compliance frameworks and audit reporting.

Responsibilities

• Deploy and manage a CNAPP solution across AWS, Azure, and GCP.
• Implement and optimize CSPM, CWPP, CIEM, DSPM, and IaC scanning.
• Monitor workloads, containers, APIs, and serverless for threats and misconfigurations.
• Investigate and respond to runtime security incidents.
• Integrate CNAPP tooling into CI/CD pipelines.
• Ensure compliance with CIS, NIST, ISO 27001, HIPAA, and PCI-DSS.
• Build dashboards and reports for cloud security posture.
• Analyze cloud entitlements and support least-privilege access.
• Lead cloud security posture assessments.

Skills

Cloud security operations

Hands-on experience with CNAPP tools

Strong security knowledge across AWS

Strong security knowledge across Azure

Strong security knowledge across GCP

Kubernetes security

Cloud threat detection

Incident response

Compliance frameworks

Tools

CNAPP tools (Wiz, Lacework, Upwind)

SIEM/SOAR tools (Splunk, Sentinel, Chronicle)

Job description

We’re currently partnered with a FTSE 250 firm, who are looking for a Cloud Security Engineer with hands‑on experience deploying and managing Cloud‑Native Application Protection Platforms (CNAPP) in multi‑cloud environments.

Location:

Cambridgeshire (Hybrid)

Pay rate:

£550-600 Inside IR35

Duration:

3 Months initially

In this role, you’ll help strengthen the organisations cloud‑native security posture across AWS, Azure, and GCP, working at the intersection of cloud operations, DevSecOps, and security architecture.

Key Responsibilities:

• Deploy and manage a CNAPP solution (Wiz preferred) across AWS, Azure, and GCP
• Implement and optimize CSPM, CWPP, CIEM, DSPM, and IaC scanning
• Monitor workloads, containers, APIs, and serverless for threats and misconfigurations
• Investigate and respond to runtime security incidents
• Integrate CNAPP tooling into CI/CD pipelines with DevOps and Engineering teams
• Ensure compliance with CIS, NIST, ISO 27001, HIPAA, and PCI‑DSS
• Build dashboards and reports for cloud security posture and incident metrics
• Analyze cloud entitlements and support least‑privilege access
• Lead cloud security posture assessments and remediation initiatives

Ideally, you’ll have:

• 3–5+ years in cloud security operations, engineering, or analysis
• Strong security knowledge across AWS, Azure, and GCP
• Hands‑on experience with CNAPP tools (Wiz, Lacework, Upwind, Defender for Cloud, CloudGuard)
• Solid understanding of Kubernetes security
• Experience in cloud threat detection and incident response
• Familiarity with SIEM/SOAR tools like Splunk, Sentinel, or Chronicle
• Strong grasp of compliance frameworks and audit reporting

  Sound like you? Please apply directly for more detail.