Cloud Security Engineer AWS - Tesco Mobile

Tesco UK; Slough; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A major UK retailer is seeking a Cloud Security Engineer to secure and optimize their cloud platforms, primarily AWS and Azure. The role emphasizes security enhancements, collaboration within DevSecOps, and thorough risk management. Ideal for individuals with substantial experience in AWS security and CI/CD practices. This position offers diverse working patterns, including remote work options, within a supportive and inclusive culture.

Qualifications

• Strong hands-on experience with AWS cloud security.
• Proven track record of delivering cloud and SaaS security improvement projects.
• Familiarity with CI/CD pipelines and integrating security tooling (e.g., SAST).
• Experience with infrastructure validation, threat identification, and risk mitigation.

Responsibilities

• Lead and implement cloud security improvements across AWS and Azure environments.
• Use tools like AWS Security Hub and Azure Security Center to monitor and enhance our security posture.
• Integrate security controls into CI/CD pipelines and development workflows.
• Collaborate with the Cyber Security Team and application developers to embed security processes.
• Validate infrastructure changes to ensure compliance with security standards.
• Act as an expert on cloud and infrastructure security.

Skills

AWS cloud security

Cloud security improvement projects

CI/CD pipelines

Infrastructure validation

Risk mitigation

Tools

AWS Security Hub

Azure Security Center

GitHub

Splunk

AWS CLI

Python

PowerShell

Docker

Kubernetes

Job description

As a Cloud Security Engineer within the Run and Operate chapter at Tesco Mobile, you’ll play a key role in securing and optimising our cloud platforms—primarily AWS and Azure. You’ll help design, manage, and deploy secure solutions across a variety of environments, maintaining a proactive programme of work to address evolving security priorities. Your responsibilities will include identifying threats and risks, implementing effective mitigations, and validating infrastructure changes. You’ll also collaborate closely with the Cyber Security Team and your squad to embed robust security checks into CI/CD pipelines, strengthening our overall cloud security posture.

As a Cloud Security Engineer, you’ll play a key role in securing our cloud infrastructure and services. You’ll work within our DevSecOps squad to:

• Lead and implement cloud security improvements across AWS and Azure environments.
• Use tools like AWS Security Hub and Azure Security Center to monitor and enhance our security posture.
• Integrate security controls into CI/CD pipelines and development workflows.
• Collaborate with the Cyber Security Team and application developers to embed security processes.
• Validate infrastructure changes to ensure compliance with security standards.
• Act as an expert on cloud and infrastructure security.

Must-have experience:

• Strong hands-on experience with AWS cloud security.
• Proven track record of delivering cloud and SaaS security improvement projects.
• Familiarity with CI/CD pipelines and integrating security tooling (e.g., SAST).
• Experience with infrastructure validation, threat identification, and risk mitigation.

Nice to have:

• GitHub and GitHub Actions experience.
• Hands-on experience with Azure cloud security.
• Familiarity with Splunk, IaC tools, and automation using AWS CLI, Python, or PowerShell.
• Exposure to containerisation (Docker, Kubernetes) and DevOps practices.

Tesco Mobile is a 50-50 joint venture between Tesco and VMO2, established in 2003. We have over 5 million customers and are the largest mobile virtual network operator in the UK. We pride ourselves on our inclusive culture and strong sense of community, and we’re committed to creating a workplace where differences are valued.

We care about human connection and keep our customers at the heart of everything we do. We’ve embraced the Agile way of working, which empowers us to self-organise, collaborate, and respond to our customers’ needs. We’re proud to have been accredited Disability Confident Leader and are committed to providing a fully inclusive and accessible recruitment process.

We offer a range of diverse full-time and part-time working patterns and are committed to finding a pattern that works for you. Our offices will continue to be where we connect, collaborate, and innovate, and we also offer remote working options.

Tesco is an equal opportunities employer and welcomes applications from all sections of the community. We are committed to equal employment opportunity and welcome applications from qualified candidates of all backgrounds.