Security Engineer

PURVIEW; Sheffield; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

PURVIEW in Sheffield seeks a Senior Cloud Security Engineer to lead CNAPP governance and secure multi-cloud environments (GCP/AWS/Azure). Hybrid work with 3 days on-site weekly.

The role involves collaborating with DevSecOps, security, and engineering to implement secure SDLC, threat modelling, and policy-driven security controls across CI/CD pipelines. The candidate will have hands-on CNAPP/CSPM experience, strong GCP security knowledge, governance and reporting capabilities, and the ability to

Qualifications

• Hands-on CNAPP/CSPM experience with Wiz, Prisma Cloud, Orca, or CrowdStrike.
• Strong GCP security knowledge including IAM, logging and network security.
• Experience with DevSecOps and embedding security controls into delivery and operational workflows.
• Proven ability to triage findings and drive remediation with metrics.
• Stakeholder collaboration across engineering, operations and security.
• Familiarity with regulated environments and auditability.

Responsibilities

• Lead CNAPP governance across multi-cloud environments (GCP/AWS/Azure).
• Collaborate with DevSecOps and engineering to embed security controls into CI/CD pipelines.
• Triage security findings, determine material risk, and drive remediation actions.
• Communicate security topics clearly to technical and non-technical stakeholders.

Skills

CNAPP

CSPM tooling

Cloud security

GCP security

DevSecOps

Kubernetes security

Threat modelling

SDLC security

Agile

Stakeholder management

Auditability

Governance

Reporting

Communication

Education

GCP certifications

Tools

Wiz

Prisma Cloud Orca

CrowdStrike

Job description

Location: Sheffield, UK (Hybrid -3 days a week WFO)

Job Type: Contract & Permanent

• The ideal candidate for this role will have the below experience and qualifications
• Handson experience with CNAPP, CSPM platforms ideally Wiz or equivalent such as Prisma Cloud Orca, CrowdStrike.
• Strong understanding of GCP security and associated best practices including IAM logging monitoring network security controls and container Kubernetes security concepts
• Experience assessing cloud security findings in context determining material risk impact and appropriate remediation options
• Experience working with DevSecOps CICD teams and embedding security controls into delivery and operational workflows
• Strong stakeholder management and collaboration skills across engineering operations and cybersecurity teams
• Experience working in a regulated environment with an understanding of auditability and control evidence
• Demonstrable experience improving cloud security posture on GCP using CNAPP,CSPM tooling and governance processes
• Ability to triage and tune security findings drive remediation and report progress using meaningful metrics
• Working knowledge of cloud security standards control frameworks and operational risk considerations eg logging monitoring access control resilience
• Strong written and verbal communication skills with the ability to communicate complex security topics clearly to technical and nontechnical stakeholders
• Experience working within an Agile environment
• GCP certifications ideally security focused eg Professional Cloud Security Engineer
• Experience supporting CNAPP across multi-cloud environments AWS, Azure in addition to GCP
• Experience integrating CNAPP outputs into enterprise reporting and governance processes

Mandatory Skills :

Agile (Value-Driven Delivery), Application Security (application security framework/ threat modelling/ Secure SDLC/ DevSecOps/Application Security Architecture Review), Network Security Architecture