Cloud Security Engineer

hastingsdirect; Leicester; On-site; GBP 70,000 - 110,000; Full time

Job summary

Hastings Direct seeks a Cloud Security Engineer to evaluate new security technologies and cloud services, implementing cloud-first solutions with a strong focus on Azure. You will develop cloud security by applying Security as Code principles and automation tooling, while aligning with enterprise security standards and governance.

You will collaborate with Security Architects and cross-functional teams to build secure, scalable cloud-native services and guardrails, contributing to the company’s

Qualifications

• Certification in Azure security or equivalent is highly desirable.
• Experience designing and securing cloud environments, especially Azure.
• Knowledge of GDPR, ISO 27001 and NIST controls and implementation.
• Experience with Azure Kubernetes Service and microservices architecture.

Responsibilities

• Evaluate security technologies and cloud services for enterprise use.
• Develop cloud security solutions using Security as Code and automation tooling.
• Collaborate with architects to define and own cloud security strategy.
• Establish guardrails and ensure solutions meet security standards and governance.
• Participate in agile teams to deliver secure cloud services.

Skills

Azure Security Engineer

CCSP

CISSP

Regulatory compliance (GDPR, ISO 27001

Security as Code

Azure AKS

DevSecOps

Security tooling

Threat prevention

Problem solving

Communication

Tools

Azure DevOps

Microsoft Defender

SIEM

PowerShell

Python

ARM/BICEP

Cloud security architecture

Job description

Welcome to Hastings Direct We're a digital insurance provider with ambitious plans to become The Best and Biggest in the UK market. Over the past few years, we've made significant investments in our data and tech capabilities, particularly within our CIO function. Our CIO team is at the forefront of driving innovation and ensuring our technology infrastructure supports our ambitious goals. We've nurtured our 4Cs culture, fostering collaboration, creativity, and continuous improvement.

We're proud of the journey we're on as a company and know that our continued success will rely on the contribution of our talented colleagues. The CIO team plays a crucial role in this journey, working on cutting-edge projects that enhance our digital presence and improve customer engagement.

We provide insurance to nearly four million customers, but we know there's even bigger opportunity out there. The fact you're now reading this job advert means we've tempted you to find out more about #lifeatHD - we really hope you like what you see, and you'll join us to share in the success of the exciting chapter that lies ahead.

We understand some people may not apply for jobs unless they feel they tick every box. If you are excited about joining us and think you have some of what we are looking for, even if you're not 100% sure, we would love to hear from you. Our CIO team is always looking for passionate individuals who are eager to make a difference and contribute to our success.

Job Details

As a Cloud Security Engineer, you will evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing on cloud-first and cloud-native technologies. Develop cloud security solutions by applying the principles of Security as Code using cloud automation tooling and adhering to industry best practices. Collaborate closely with Security Architects to define and own the cloud security strategy, ensuring a continuously updated and secure environment. Establish cloud security best practices and develop, construct, and evaluate cloud-native services that offer necessary guardrails for developers. Validate and ensure that cloud solutions meet published enterprise security standards, are properly governed, and delivered in accordance with established guidelines. Embrace agile working practices, collaborating with teams across engineering disciplines and strategic partners to release enterprise-class cloud services.

Skills we would love you to have

• Relevant certifications (e.g., Azure Security Engineer, CCSP, CISSP, CCSK) are highly desirable.
• Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services.
• Strong understanding of regulatory compliance requirements (e.g., GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements.
• In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles.
• Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture.
• Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.
• Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.
• Excellent problem-solving skills and the ability to analyse complex security issues and develop effective solutions.
• Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams.
• In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL.
• Familiarity with scripting toolsets and automation with Microsoft ARM, BICEP, PowerShell, Python.
• Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure.
• Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions.
• Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code.

Unfortunately, we are unable to progress with candidates that require sponsorship at this time .

What we offer

Join us and you'll find a different way of doing things. We call it the 4Cs. We focus on getting it right for our colleagues, customers, company, and community. As one of our colleagues, you'll be helping to drive our growth, so in return, we'll give you all the support, training and development you need. Not to mention plenty of recognition and rewards, and the scope to voice your ideas and put them into practice.

Reward Salary - Attractive salary based on experience + car allowance (pay revie