Cloud Security Engineer

JR United Kingdom; United Kingdom; On-site; GBP 50,000 - 90,000; Full time

Job summary

Join a forward-thinking company as a Cloud Security Engineer, where you'll play a pivotal role in safeguarding IT and OT networks. This innovative firm offers excellent opportunities for career advancement while you work on cloud security configurations and incident remediation. Collaborate with a supportive team to enforce security policies, conduct vulnerability assessments, and manage security incidents using cutting-edge tools and frameworks. If you're passionate about cloud security and eager to make a significant impact, this role is perfect for you.

Qualifications

• Degree or equivalent experience in Cyber Security or related discipline.
• Proficiency in AWS and Azure, including core services.

Responsibilities

• Support OT Security, Governance Risk and Compliance, and Security Assurance.
• Document and present security metrics at monthly reviews.

Skills

Cloud Security

AWS

Azure

Python

Problem-Solving

Analytical Thinking

Communication

Team Collaboration

Education

Degree in Cyber Security or related field

Tools

AWS GuardDuty

Azure Security Center

Google Cloud Security Command Center

AWS CloudWatch

Azure Monitor

Job description

Social network you want to login/join with:

Are you looking to be part of an innovative and supportive team with excellent opportunities for career progression and development? We are seeking a Cloud Security Engineer to ensure the security and compliance of our clients IT and OT networks. In this role, you will act as a security subject matter expert, assisting with cloud security configurations and incident remediation.

Responsibilities

• Support various security functions, including OT Security, Governance Risk and Compliance, and Security Assurance.
• Document and present security metrics at monthly reviews.
• Provide technical and non-technical security support to the wider security team.
• Work with third-party network vendors to coordinate security activities.
• Assist with internal and external audits, penetration testing, and incident reviews.
• Enforce security policies, conduct vulnerability assessments, and coordinate mitigation efforts.
• Attend the head office in Portsmouth at least once a quarter.

Requirements

• A degree or equivalent career experience in a relevant discipline.
• Understanding of Cyber Security Frameworks and standards (e.g., NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443).
• Cloud Platforms: Proficiency in AWS and Azure, covering core services like computing, storage, networking, and databases.
• Familiarity with cloud-native security tools such as AWS GuardDuty, Azure Security Center, and Google Cloud Security Command Center.
• Understanding of networking concepts, virtualization, and cloud infrastructure.
• Experience handling security incidents, including detection, analysis, and response.
• Proficiency in scripting languages (e.g., Python, PowerShell, Bash).
• Ability to analyse and utilize threat intelligence to enhance security measures.
• Experience with security tools such as firewalls, WAFs, intrusion detection/prevention systems, and vulnerability scanners.
• Conducting security audits and vulnerability assessments.
• Implementation and management of IAM policies.
• Risk assessment and mitigation in cloud environments.
• Experience with monitoring tools (e.g., AWS CloudWatch, Azure Monitor, log analysis).
• Strong attention to detail and ability to communicate effectively across business levels.

Preferred Certifications

• AWS Certified Solutions Architect – Professional
• Microsoft Certified: Azure Security Engineer Associate
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• SC clearance or ability to obtain it

Soft Skills

• Analytical Thinking: Ability to interpret complex security data and identify threats.
• Problem-Solving: Strong skills in addressing security challenges.
• Communication: Clear and concise reporting of security incidents and collaboration with teams.
• Team Collaboration: Working effectively within a team and across departments.
• Continuous Learning: Staying updated with the latest security trends, threats, and technologies.