Senior Cloud & AI Security Enablement Lead

Hackajob Ltd; Greater London; On-site; GBP 61,000 - 101,000; Full time

Benefits offered by this job

Flexible working hours

Wellbeing initiatives

Shared parental leave

Study assistance

Sabbaticals

Holiday allowance

Life assurance

Contributory pension

Share options

Optional dental insurance

Employee Assistance Programme

Employee resource groups

Learning and development resources

Employee discounts

Job summary

Hackajob Ltd is seeking a senior cloud security engineer to design and implement scalable guardrails for secure cloud architectures and AI-enabled applications. You will collaborate with security architecture, AppSec, GRC, and engineering teams to embed security into cloud landing zones, CI/CD, and IaC workflows.

You will drive policy-as-code, threat modelling, and AI-assisted security workflows, turning complex requirements into practical, reusable patterns and templates with clear guidance for

Qualifications

• Experience in machine learning engineering.
• Strong experience in cloud security engineering, application security, security architecture, DevSecOps, or security automation.
• Hands-on experience with at least one major cloud platform, such as AWS or Azure.
• Knowledge of IAM, logging, encryption, secrets management, network security, storage security, vulnerability management, and secure CI/CD.
• Experience with infrastructure-as-code and cloud security tooling like CSPM, CNAPP, IaC scanning, SAST, SCA, secrets scanning, or policy-as-code.
• Ability to translate security standards and architecture requirements into practical implementation patterns.
• Familiarity with generative AI, LLM-enabled applications, AI-assisted development, or AI security risks.
• Strong scripting, automation, workflow design, or tooling integration experience.
• Excellent written and verbal communication skills for security guidance to engineering teams.
• Desirable: building cloud security guardrails, landing zone controls, reusable modules, or automated remediation workflows.
• Desirable: experience supporting regulated environments with compliance obligations.
• Desirable: familiarity with AI security guidance (NIST, OWASP, CSA).
• Desirable: experience with RAG architecture, AI agents, vector databases, AI APIs, prompt engineering, or AI application threat modelling.
• Desirable: building security knowledge assistants, prompt libraries, AI-assisted review workflows, or security automation.

Responsibilities

• Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, and data protection.
• Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering-ready requirements.
• Partner with cloud, platform, DevOps, and product engineering to embed security controls into cloud landing zones, CI/CD pipelines, IaC workflows, and operational processes.
• Support the implementation and tuning of CSPM, CNAPP, cloud workload protection, IaC scanning, secrets scanning, and related tools.
• Develop policy-as-code and control-as-code mechanisms to prevent, detect, and report common cloud misconfigurations.
• Support cloud-native vulnerability/remediation with prioritization logic and reusable fixes.
• Establish cloud security metrics and dashboards for adoption, misconfigurations, remediation progress, and recurring issues.
• Design AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, and risk statements.
• Build prompt libraries, rubrics, validation steps, and human-in-the-loop processes for approved AI use within InfoSec.
• Identify repetitive BISO, AppSec, and Security Architecture tasks that AI-assisted processes can accelerate.
• Collaborate with GRC, Legal, Privacy, and leadership to ensure auditable, explainable AI workflows.
• Measure AI workflow effectiveness: time saved, consistency, review quality, and reduced manual work.
• Define secure design patterns for AI-enabled apps, including LLM features and AI integrations.
• Establish security requirements for AI workloads, with identity, secrets, data storage, and observability considerations.
• Support AI threat modelling and risk reviews with BISO/AppSec.
• Create developer guidance for safe AI coding, AI APIs, data ingestion, and AI-generated code.
• Convert recurring BISO/AppSec questions into reusable guidance and self-service workflows.
• Build intake/m routing to determine BISO/AppSec/architecture/GRC review needs.
• Create and maintain a library of approved cloud and AI security patterns.

Skills

ML engineering

Cloud security

Security architecture

DevSecOps

Security automation

IAM

Logging

Encryption

Secrets management

Network security

Storage security

Vulnerability management

Secure CI/CD

IaC tooling

SCA

SAST

Policy-as-code

AI security

Generative AI

LLM-enabled apps

AI security risks

Scripting

Automation

Workflow design

Tooling integration

Communication

Tools

CSPM

CNAPP

IaC scanning

SAST

SCA

Secrets scanning

Policy-as-code tooling

Job description

Hackajob Ltd is seeking a senior cloud security engineer to design and implement scalable guardrails for secure cloud architectures and AI-enabled applications. You will collaborate with security architecture, AppSec, GRC, and engineering teams to embed security into cloud landing zones, CI/CD, and IaC workflows.

You will drive policy-as-code, threat modelling, and AI-assisted security workflows, turning complex requirements into practical, reusable patterns and templates with clear guidance for