Security Engineer

Vallum Associates; Manchester; On-site; GBP 70,000 - 120,000; Full time

Job summary

Vallum Associates is seeking an experienced Security Cloud Engineer to safeguard cloud architectures across AWS, Azure, or GCP, while partnering with engineering teams to build secure services and automate defenses.

You will drive CI/CD security, implement cloud-native patterns, and translate designs into scalable plans. Strong container expertise and familiarity with Wiz Defend and SIEM are valued.

Qualifications

• Experience securing cloud environments across AWS, Azure or GCP and implementing security controls.

Responsibilities

• Drive cloud infrastructure enhancements aligned with security standards.
• Collaborate with engineering to deliver secure cloud services.
• Support cloud-native architectures and DevOps adoption.
• Translate designs into actionable implementation plans.
• Build and support CI/CD pipelines for secure deployments.
• Automate cloud security processes and remediation.
• Ensure compliance with security, governance, and SDLC standards.
• Monitor environments using SIEM and cloud security tooling.
• Support incident, problem, and change management.
• Work with Docker, Kubernetes, ECS/EKS, AKS, or GKE.
• Support infrastructure automation with CloudFormation, ARM/Bicep, Terraform, Chef.

Skills

Cloud platforms (AWS/Azure/GCP)

Cloud security engineering

CI/CD / DevOps

Scripting (PowerShell/Bash/Python/Java

Architecture design (HLD/LLD)

Docker/Kubernetes

OS administration (Windows/Linux)

IAM / RBAC / encryption

Security tooling (SIEM, Wiz Defend)

Regulated environments exposure

Industry certifications (Azure/AWS/GCP

Tools

CloudFormation

ARM/Bicep

Terraform

Chef

Wiz Cloud/Defend

Job description

We are looking for an experienced Security Cloud Engineer to support cloud security engineering, automation, and secure cloud infrastructure delivery across AWS, Azure, or GCP environments. The role will focus on enhancing cloud security capabilities, supporting cloud-native architecture adoption, automating remediation processes, and ensuring cloud platforms are aligned with security, governance, and software lifecycle best practices.

Key Responsibilities:

• Drive cloud infrastructure enhancements in line with agreed strategy, security standards, and business requirements.
• Work with engineering teams to design, build, and deliver secure cloud services.
• Support stakeholders in adopting cloud-native application architectures and DevOps practices.
• Translate high-level and low-level designs into actionable technical implementation plans.
• Build and support CI/CD pipelines for secure application and infrastructure deployment.
• Automate cloud security processes, escalations, and remediation activities.
• Ensure cloud infrastructure follows security, governance, compliance, and software lifecycle standards.
• Monitor cloud environments using SIEM, cloud security tooling, and observability platforms.
• Support incident, problem, and change management processes.
• Work with container platforms such as Docker, Kubernetes, ECS/EKS, AKS, or GKE.
• Support infrastructure automation using tools such as CloudFormation, ARM/Bicep, Terraform, Chef, or similar tools.

Key Skills:

• Strong experience in cloud platforms such as AWS, Azure, or GCP.
• Cloud security engineering experience with knowledge of security controls and cloud-native security tools.
• Hands-on experience with CI/CD pipelines, DevOps processes, and Agile/Scrum delivery.
• Scripting experience in PowerShell, Bash, Python, or Java.
• Good understanding of HLD/LLD translation, infrastructure design, and implementation.
• Experience with Wiz Cloud / Wiz Defend or similar cloud security posture tools.
• Strong container knowledge, especially Docker and Kubernetes.
• Experience with Windows and Red Hat Linux operating systems.
• Knowledge of SIEM tools, incident management, change management, and problem management.
• Experience with cloud governance and access control, including IAM, RBAC, policies, and encryption.
• Exposure to regulated or financial sector environments is desirable.
• Relevant certifications such as Azure, AWS, GCP, or CISSP are preferred.