Security Engineer

JR United Kingdom; Birmingham; On-site; GBP 50,000 - 90,000; Full time

Job summary

An established industry player is seeking a skilled Cloud Security Engineer to enhance its cybersecurity team. This hands-on role focuses on securing cloud infrastructure, primarily in Azure, while ensuring compliance with Governance, Risk & Compliance frameworks. You'll assess infrastructure posture, identify misconfigurations, and implement secure configurations across cloud-native platforms. Collaborating with a dynamic team, you'll drive secure-by-design principles and maintain high security standards. If you're a proactive team player with a strong technical foundation, this is your chance to make a significant impact in a complex organization.

Qualifications

• 3+ years of hands-on experience in cloud security engineering or a related role.
• Strong expertise with Microsoft Azure security services and GCP security tools.

Responsibilities

• Conduct regular cloud infrastructure assessments and provide remediation recommendations.
• Support and integrate security tools within cloud platforms.

Skills

Cloud Security Engineering

Microsoft Azure Security Services

Google Cloud Platform Security

Palo Alto Security Technologies

Governance, Risk & Compliance

Stakeholder Engagement

Tools

Azure Defender

Azure Sentinel

Prisma Cloud

Cortex XSOAR/XDR

Job description

Social network you want to login/join with:

We are seeking a skilled Cloud Security Engineer to join our growing cybersecurity team supporting a large-scale utilities organization. This role will focus on securing cloud infrastructure (primarily Azure, with secondary exposure to GCP) and ensuring alignment with GRC (Governance, Risk & Compliance) frameworks and security best practices.

You’ll play a key role in assessing infrastructure posture, identifying and resolving misconfigurations, and driving secure-by-design principles across cloud-native platforms and tools. This is a hands-on role that offers the opportunity to work across both project and operational security domains.

Key Responsibilities:

• Conduct regular cloud infrastructure best practice assessments and provide remediation recommendations, primarily on Azure, with additional input for GCP environments.
• Identify misconfigurations and work closely with the defense teams to implement secure configurations.
• Support and integrate security tools (e.g., Azure Defender, Sentinel, Prisma Cloud, Cortex XSOAR/XDR) within cloud platforms.
• Contribute to the secure implementation of products and services being introduced into the cloud environment.
• Ensure projects align with GRC requirements and security standards—advocating for secure-by-design principles.
• Maintain and enhance cloud security dashboards and monitoring tools to provide visibility into posture and threats.
• Collaborate with consultants and permanent team members to uphold high security standards across the team.
• Track and align with technology roadmaps and leverage tools like Horizon scanners for continuous security evaluation.
• Provide support for cloud security reviews and audits.

Skills & Experience Required:

• 3+ years of hands-on experience in cloud security engineering or a related role.
• Strong expertise with Microsoft Azure security services (Sentinel, Defender, Security Center).
• Exposure to Google Cloud Platform (GCP) security tools and services.
• Familiarity with Palo Alto security technologies, especially Prisma Cloud and Cortex suite.
• Solid understanding of Governance, Risk & Compliance (GRC) in a cloud context.
• Experience working in a C&I (Commercial & Industrial) environment is advantageous.
• Proficiency in interpreting cloud architecture roadmaps and applying security controls accordingly.
• Strong stakeholder engagement and ability to take ownership in a fast-paced environment.

What We’re Looking For:

• A proactive team player who can carry responsibility and operate with autonomy.
• Someone who thrives in a collaborative environment and is keen to help shape security across a large, complex organization.
• A clear communicator with a solid technical foundation and an eye for process and compliance.