Cloud Security Engineer

JR United Kingdom; Chatham; Hybrid; GBP 90,000 - 100,000; Full time

Job summary

A highly reputable financial corporation is hiring a Cloud Security Engineer based in Chatham. The role involves securing cloud services, implementing foundational security, and ensuring compliance with industry standards. The successful candidate will work within an established security team, facilitating cloud transformations in a hybrid working environment.

Benefits

30 Days Holiday

Medical Cover

Life Cover

Pension (up to 8% employer contribution)

Work from home options

Flexible working

Qualifications

• Proven experience in Cloud Infrastructure Engineering and Security Engineering.
• Experience implementing secure foundational services in cloud infrastructure is essential.
• Advanced understanding of scripting languages like Python.

Responsibilities

• Assist with the design and build of secure Azure cloud services.
• Implement secure systems through regulations and policies.
• Develop security policy as code for public cloud services.

Skills

Security design principles

RBAC

Monitoring

Incident response

Cloud Infrastructure Engineering

Python

Terraform

Education

Microsoft Azure Security Engineer Associate certification

Tools

Rapid7 SIEM

CloudFormation

Job description

Social network you want to login/join with:

A highly reputable and market-leading financial corporation is currently hiring a Cloud Security Engineer who has recent experience in on-premises to cloud transformations within an established security team. The chosen Cloud Security Engineer will play a crucial role in the design/implementation of our client’s new technology estate. You must have demonstrable experience of security design principles & practices across cloud, storage, networking and RBCA coupled with monitoring, alerting and incident response to be considered for this position.

This role is paying between £90,000 to £100,000 + 25% Bonus with hybrid working (3 day PW in office) to be based in Chatham or Wolverhampton. Our client is also open to consider candidates who require visa sponsorship on an individual basis only.

Core responsibilities:

• Assist with scoping, design and build of secure Azure cloud services to support the Modernisation programme and deliver a scalable and flexible cloud security capability to support and facilitate innovation for our clients new ecosystem.
• Work with the Design & Delivery Lead to help define and deliver the high-level and low-level security objectives and designs for a project or programme, aligning to business and functional requirements.
• Work with teams to implement secure systems and solutions through the application of regulations, policies, standards and procedures to meet user needs while managing business and security risks.
• Develop, test, and deliver Security Policy as code for a variety of Public Cloud compute services and Container platforms leveraging native services.
• Understand industry standard controls such as CIS/NIST/GDPR/ISO/CSA CCM/MCSB to deliver compliant solutions through appropriate adoption, configuration and management of key controls.
• Deliver security work stream activities and tasks against the migration strategy and integration points for central security services to manage/monitor the cloud infrastructure.
• Drive discussions and design decisions to deliver scalable and manageable cloud solutions aligned to security, performance, operational and cost constraints.

Essential technical skills and experience

• Proven experience in Cloud Infrastructure Engineering/Platform Engineer/Security Engineer role, migrating and integrating cloud foundation services (preferably on MS Azure public cloud) is essential.
• Proven experience with implementing secure core foundational services in a cloud infrastructure for AD, SecDevOps, Networking Services, at an enterprise level is essential.
• Proven experience in SIEM & SOAR (security information and event management (SIEM) and security orchestration, automation, and response (SOAR). Experience with Rapid7 SIEM tooling is desirable.
• Proven experience with the core foundational security services of cloud providers (preferably Azure or AWS equivalent for AD, Defender for Cloud, Azure Sentinel, AppGateway and APIM, Azure Identity Protection, PIM) is essential.
• Proven experience with Provisioning Security policy as Code (IAC) tools such as Terraform, CloudFormation and adopting secure code practices and guidelines is essential.
• Advanced understanding and use of scripting languages such as Python, Groovy, Go is essential.
• Microsoft Azure Security Engineer Associate certification or AWS equivalent.

Benefits Package:

• Visa sponsorship / £90 to100k / Up to 25% Bonus / Work from home options / Flexible working / 30 Days Holiday / Medical Cover / Life Cover / Pension (up to 8% employer contribution)