Security Engineer

Forsyth Barnes; Birmingham; Remote; GBP 55,000 - 85,000; Full time

Job summary

An established industry player is on the lookout for a skilled Cloud Security Engineer to join their cybersecurity team. This role offers the chance to secure cloud infrastructure, primarily focusing on Azure, while also engaging with GCP. You'll be instrumental in assessing security postures, resolving misconfigurations, and advocating for secure-by-design principles. If you thrive in a collaborative environment and are passionate about shaping security across a large organization, this opportunity is perfect for you. Join a forward-thinking team and make a significant impact in the utilities sector.

Qualifications

• 3+ years of experience in cloud security engineering.
• Strong expertise in Microsoft Azure security services.
• Familiarity with GRC in a cloud context.

Responsibilities

• Conduct cloud infrastructure assessments and provide remediation recommendations.
• Support and integrate security tools within cloud platforms.
• Collaborate with teams to uphold high security standards.

Skills

Cloud Security Engineering

Microsoft Azure Security Services

Google Cloud Platform Security

Governance, Risk & Compliance (GRC)

Palo Alto Security Technologies

Stakeholder Engagement

Tools

Azure Defender

Azure Sentinel

Prisma Cloud

Cortex XSOAR/XDR

Job description

Get AI-powered advice on this job and more exclusive features.

This range is provided by Forsyth Barnes. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Direct message the job poster from Forsyth Barnes

Divisional Manager – Permanent Appointments - IT & Data, Forsyth Barnes

Job Title: Cloud Security Engineer

Working Pattern: Remote

We are seeking a skilled Cloud Security Engineer to join our growing cybersecurity team supporting a large-scale utilities organization. This role will focus on securing cloud infrastructure (primarily Azure, with secondary exposure to GCP) and ensuring alignment with GRC (Governance, Risk & Compliance) frameworks and security best practices.

You’ll play a key role in assessing infrastructure posture, identifying and resolving misconfigurations, and driving secure-by-design principles across cloud-native platforms and tools. This is a hands-on role that offers the opportunity to work across both project and operational security domains.

Key Responsibilities:

1. Conduct regular cloud infrastructure best practice assessments and provide remediation recommendations, primarily on Azure, with additional input for GCP environments.
2. Identify misconfigurations and work closely with the defense teams to implement secure configurations.
3. Support and integrate security tools (e.g., Azure Defender, Sentinel, Prisma Cloud, Cortex XSOAR/XDR) within cloud platforms.
4. Contribute to the secure implementation of products and services being introduced into the cloud environment.
5. Ensure projects align with GRC requirements and security standards—advocating for secure-by-design principles.
6. Maintain and enhance cloud security dashboards and monitoring tools to provide visibility into posture and threats.
7. Collaborate with consultants and permanent team members to uphold high security standards across the team.
8. Track and align with technology roadmaps and leverage tools like Horizon scanners for continuous security evaluation.
9. Provide support for cloud security reviews and audits.

Skills & Experience Required:

1. 3+ years of hands-on experience in cloud security engineering or a related role.
2. Strong expertise with Microsoft Azure security services (Sentinel, Defender, Security Center).
3. Exposure to Google Cloud Platform (GCP) security tools and services.
4. Familiarity with Palo Alto security technologies, especially Prisma Cloud and Cortex suite.
5. Solid understanding of Governance, Risk & Compliance (GRC) in a cloud context.
6. Experience working in a C&I (Commercial & Industrial) environment is advantageous.
7. Proficiency in interpreting cloud architecture roadmaps and applying security controls accordingly.
8. Strong stakeholder engagement and ability to take ownership in a fast-paced environment.

What We’re Looking For:

• A proactive team player who can carry responsibility and operate with autonomy.
• Someone who thrives in a collaborative environment and is keen to help shape security across a large, complex organization.
• A clear communicator with a solid technical foundation and an eye for process and compliance.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Utilities and Services for Renewable Energy