Cloud Security Engineer - GCP CNAPP & DevSecOps (Hybrid UK)

PURVIEW; Sheffield; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

PURVIEW in Sheffield seeks a Senior Cloud Security Engineer to lead CNAPP governance and secure multi-cloud environments (GCP/AWS/Azure). Hybrid work with 3 days on-site weekly.

The role involves collaborating with DevSecOps, security, and engineering to implement secure SDLC, threat modelling, and policy-driven security controls across CI/CD pipelines. The candidate will have hands-on CNAPP/CSPM experience, strong GCP security knowledge, governance and reporting capabilities, and the ability to

Qualifications

• Hands-on CNAPP/CSPM experience with Wiz, Prisma Cloud, Orca, or CrowdStrike.
• Strong GCP security knowledge including IAM, logging and network security.
• Experience with DevSecOps and embedding security controls into delivery and operational workflows.
• Proven ability to triage findings and drive remediation with metrics.
• Stakeholder collaboration across engineering, operations and security.
• Familiarity with regulated environments and auditability.

Responsibilities

• Lead CNAPP governance across multi-cloud environments (GCP/AWS/Azure).
• Collaborate with DevSecOps and engineering to embed security controls into CI/CD pipelines.
• Triage security findings, determine material risk, and drive remediation actions.
• Communicate security topics clearly to technical and non-technical stakeholders.

Skills

CNAPP

CSPM tooling

Cloud security

GCP security

DevSecOps

Kubernetes security

Threat modelling

SDLC security

Agile

Stakeholder management

Auditability

Governance

Reporting

Communication

Education

GCP certifications

Tools

Wiz

Prisma Cloud Orca

CrowdStrike

Job description

PURVIEW in Sheffield seeks a Senior Cloud Security Engineer to lead CNAPP governance and secure multi-cloud environments (GCP/AWS/Azure). Hybrid work with 3 days on-site weekly.

The role involves collaborating with DevSecOps, security, and engineering to implement secure SDLC, threat modelling, and policy-driven security controls across CI/CD pipelines. The candidate will have hands-on CNAPP/CSPM experience, strong GCP security knowledge, governance and reporting capabilities, and the ability to