Cloud Security Engineer: Azure & DevSecOps

Hastings Direct; Bexhill-on-Sea; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Reward Salary

Flexible Working

Competitive Bonus Scheme

Physical Wellbeing (Healthcare)

Financial Wellbeing (Pension)

Mental Wellbeing Programme

27 days annual leave + bank holidays

Job summary

Hastings Direct is seeking a Cloud Security Engineer to evaluate and implement cloud security solutions, focusing on Azure, cloud-native services, and Security as Code. You will collaborate with Security Architects to define strategy and ensure governance, while enforcing security standards across the enterprise environment.

Join a hybrid-working team under the CIO function, contributing to a secure, scalable, and compliant cloud infrastructure with modern tooling and automation.

Qualifications

• Relevant certifications (e.g., Azure Security Engineer, CCSP, CISSP, CCSK) are highly desirable.
• Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services.
• Strong understanding of regulatory compliance requirements (GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements.
• In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles.
• Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture.
• Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.
• Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.
• Excellent problem-solving skills and the ability to analyse complex security issues and develop effective solutions.
• Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams.
• In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL.
• Familiarity with scripting toolsets and automation with Microsoft ARM, BICEP, PowerShell, Python.
• Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure.
• Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions.
• Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code.

Responsibilities

• As a Cloud Security Engineer, you will evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing on cloud-first and cloud-native technologies.
• Develop cloud security solutions by applying the principles of Security as Code using cloud automation tooling and adhering to industry best practices.
• Collaborate closely with Security Architects to define and own the cloud security strategy, ensuring a continuously updated and secure environment.
• Establish cloud security best practices and develop, construct, and evaluate cloud-native services that offer necessary guardrails for developers.
• Validate and ensure that cloud solutions meet published enterprise security standards, are properly governed, and delivered in accordance with established guidelines.
• Embrace agile working practices, collaborating with teams across engineering disciplines and strategic partners to release enterprise-class cloud services.

Skills

Azure Security

Security as Code

DevSecOps

Cloud Architecture

Compliance

Tools

Azure Kubernetes Service (AKS)

Defender Tools

SIEM

PowerShell

Python

ARM/BICEP

Load Balancers

Job description

Hastings Direct is seeking a Cloud Security Engineer to evaluate and implement cloud security solutions, focusing on Azure, cloud-native services, and Security as Code. You will collaborate with Security Architects to define strategy and ensure governance, while enforcing security standards across the enterprise environment.

Join a hybrid-working team under the CIO function, contributing to a secure, scalable, and compliant cloud infrastructure with modern tooling and automation.