Cloud Security Engineer

Hastings Direct; East Midlands; Hybrid; GBP 65,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Competitive salary

Private healthcare

Pension scheme

Bonuses

Job summary

Hastings Direct is seeking a Cloud Security Engineer to help evaluate, design and implement cloud security across our Azure environment. You will work with security architects to define strategy, develop secure cloud-native services, and ensure governance and compliance across the estate.

The role emphasizes Security as Code, automation, and collaboration with cross-functional teams to deliver enterprise-grade security solutions in a hybrid working environment.

Qualifications

• Certifications such as Azure Security Engineer, CCSP, CISSP, CCSK are highly desirable.
• Proven experience in designing, implementing, and securing cloud environments with a focus on Microsoft Azure.
• Strong understanding of GDPR, ISO 27001, NIST and implementing controls to meet these requirements.

Responsibilities

• Evaluate security technologies and cloud services; perform engineering work and security analysis.
• Develop cloud security solutions using Security as Code and cloud automation tooling.
• Collaborate with Security Architects to define and own cloud security strategy.
• Establish best practices and guardrails for cloud-native services.
• Ensure cloud solutions meet enterprise security standards and governance guidelines.
• Embrace agile practices and collaborate across teams to release enterprise-class cloud services.

Skills

Azure Security

Cloud design

DevSecOps

Security tooling

KQL

Automation

Communication

Tools

Azure Kubernetes Service

Microsoft Defender

SIEM

PowerShell

Python

ARM/BICEP

Job description

Welcome to Hastings Direct

We're a digital insurance provider with ambitious plans to become The Best and Biggest in the UK market. Over the past few years, we've made significant investments in our data and tech capabilities, particularly within our CIO function. Our CIO team is at the forefront of driving innovation and ensuring our technology infrastructure supports our ambitious goals. We've nurtured our 4Cs culture, fostering collaboration, creativity, and continuous improvement.

We're proud of the journey we're on as a company and know that our continued success will rely on the contribution of our talented colleagues. The CIO team plays a crucial role in this journey, working on cutting-edge projects that enhance our digital presence and improve customer engagement.

We provide insurance to nearly four million customers, but we know there's even bigger opportunity out there. The fact you're now reading this job advert means we've tempted you to find out more about #lifeatHD - we really hope you like what you see, and you'll join us to share in the success of the exciting chapter that lies ahead.

We understand some people may not apply for jobs unless they feel they tick every box. If you are excited about joining us and think you have some of what we are looking for, even if you're not 100% sure, we would love to hear from you. Our CIO team is always looking for passionate individuals who are eager to make a difference and contribute to our success.

Job Details

• As a Cloud Security Engineer, you will evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing on cloud-first and cloud-native technologies.
• Develop cloud security solutions by applying the principles of Security as Code using cloud automation tooling and adhering to industry best practices.
• Collaborate closely with Security Architects to define and own the cloud security strategy, ensuring a continuously updated and secure environment.
• Establish cloud security best practices and develop, construct, and evaluate cloud-native services that offer necessary guardrails for developers.
• Validate and ensure that cloud solutions meet published enterprise security standards, are properly governed, and delivered in accordance with established guidelines.
• Embrace agile working practices, collaborating with teams across engineering disciplines and strategic partners to release enterprise-class cloud services.

Skills we would love you to have

• Relevant certifications (e.g., Azure Security Engineer, CCSP, CISSP, CCSK) are highly desirable.
• Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services.
• Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements.
• In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles.
• Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture.
• Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.
• Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.
• Excellent problem-solving skills and the ability to analyse complex security issues and develop effective solutions.
• Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams.
• In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL.
• Familiarity with scripting toolsets and automation with Microsoft ARM, BICEP, PowerShell, Python.
• Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure.
• Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions.
• Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code.

Unfortunately, we are unable to progress with candidates that require sponsorship at this time.

What we offer

• Reward Salary - Attractive salary based on experience + car allowance (pay reviews also completed each year)
• Flexible Working - We champion a flexible and hybrid working approach so please speak to your recruiter to discuss in more detail, including days in the office and at home.
• Competitive Bonus Scheme - All colleagues are eligible for our annual 4Cs performance bonus, which is usually paid in March. The scheme is based on Hastings' performance against our business goals and your own personal performance.
• Physical Wellbeing - We like to help our colleagues take a proactive approach in keeping themselves well, that's why we fund our colleagues to be able to claim against everyday health care through our healthcare cash plan.
• Financial Wellbeing - As well as providing you with 4x your salary with our life assurance cover and income protection at no extra cost, pension contribution match up to 10%, we are proud to provide you with an AWARD WINNING package which includes - discounts and cashback at everyday retailers and on our own products, fee free independent mortgage advice, and free access to financial wellbeing support.
• Mental Wellbeing Programme - At Hastings Direct we understand that mental health cannot not be scheduled, that's why we have a range of support to help you keep yourself well. We have the thrive mental health app, our colleague assistance programme available 24/7, our own in-house mental health first aiders, support groups and a dedicated team to make sure we are covering your needs.
• There's more! - 27 days annual leave +bank holidays, with the option to buy or sell one of your contracted weeks, access to private healthcare, dental plans, discounted health assessments, cycle to work and tech schemes, discounted and free onsite facilities, social events throughout the year and much more. Most of our benefits and wellbeing resources are available to colleagues from their first day whilst some optional benefits, which involve committing to a 12-month payment schedule, are available as soon as you have completed your probationary period.

Our 4Cs principles are simple: we believe by creating the right culture for our colleagues and giving them the right tools to do their job, we'll deliver good outcomes for every customer, helping us to grow the company profitably and sustainably and allowing us to invest in the communities we serve.

We deliver good outcomes for our customers every time by providing great products at the right price with our simple and straightforward service. We treat customers like we want to be treated - fairly, respectfully and with their best interests at heart.

Hastings Group is an equal opportunities employer which means we treat people fairly. We welcome applications from all suitably skilled persons regardless of their gender, age, race, disability, ethnic background, religion/belief, sexual orientation, gender reassignment or marital/family status. Please also note that we have a thorough referencing process, which includes credit and criminal record checks.

At Hastings Direct, we're committed to creating an inclusive environment where everyone has the opportunity to succeed. If you require any reasonable adjustments during the recruitment process, we encourage you to be open with us. Our recruitment team is here to provide the support you need to ensure a fair and accessible experience for all.

Job posting end date: 13/10/2026