Senior Cloud Security Engineer

Wolters Kluwer; York and North Yorkshire; On-site; GBP 60,000 - 90,000; Full time

Job summary

Wolters Kluwer seeks a Cloud Security Engineer for the FAB platform to strengthen security, resilience and compliance. The role focuses on cloud-native security controls, DevSecOps automation, and operational security across FAB workloads and services.

Based in the UK, you will collaborate with engineering, platform operations, and audit teams to implement secure configurations, IAM practices, vulnerability management, and security monitoring throughout the development lifecycle.

Qualifications

• Hands-on experience in cloud security, DevSecOps, or infrastructure security in cloud-native environments.
• Familiarity with CI/CD pipelines and automated security tooling.
• Experience with IAM, encryption, logging, and vulnerability scanning in regulated settings.

Responsibilities

• Implement and maintain cloud security controls across FAB environments.
• Support secure configuration of cloud resources, including network security, logging, and monitoring.
• Assist in securing hybrid and multi-cloud FAB deployments and integrations.
• Participate in security reviews, incident response support, and audit preparation.

Skills

Cloud security

DevSecOps

IAM & encryption

Vulnerability management

Networking security

Security monitoring

Tools

SAST

DAST

IaC scanning

Dependency scanning

Job description

• The Cloud Security Engineer – FAB supports the security, resilience, and compliance of FAB (Foundation and Beyond), Wolters Kluwer’s centralized GenAI platform
• This role focuses on cloud‑native security controls, DevSecOps automation, and operational security, ensuring that FAB services and workloads are protected throughout their lifecycle
• FAB operates as a shared internal platform used by multiple product teams in regulated environments
• As a result, this role emphasizes secure cloud configuration, identity and access management, vulnerability management, and security monitoring, working closely with FAB engineering, platform operations, and audit teams
• Implement and maintain cloud security controls across FAB environments, aligned with WK policies and FAB’s shared responsibility model
• Support secure configuration of cloud resources, including network security, encryption, logging, and monitoring
• Assist in securing hybrid and multi‑cloud FAB deployments supporting platform runtime and integrations
• Support identity and access management (IAM) practices for FAB, including least‑privilege access, workspace isolation, and secure API access patterns
• Assist with configuration and review of authentication and authorization mechanisms used by FAB services and integrations
• Participate in access reviews and remediation activities as part of security and audit readiness
• Contribute to DevSecOps pipelines by supporting automated security checks such as SAST, dependency scanning, IaC scanning, and DAST
• Help triage, track, and remediate security findings generated by CI/CD and cloud security tools
• Partner with engineering teams to ensure security requirements are addressed early in the development lifecycle
• Support vulnerability management activities, including review, prioritization, and remediation tracking for FAB assets
• Assist with operational security improvements such as monitoring, alerting, and security logging
• Participate in incident response support and root‑cause analysis under established FAB and */dxg processes
• Support SOC 2, HIPAA, and other compliance activities by assisting with evidence collection, control validation, and audit preparation
• Participate in security reviews, penetration testing coordination, and follow‑up remediation activities
• Help maintain documentation related to security controls, procedures, and operational readiness

• Strong attention to detail and willingness to learn security practices in regulated environments
• Experience in cloud security, DevSecOps, or infrastructure security in a cloud‑native environment
• Familiarity with CI/CD pipelines and automated security tooling
• Ability to work collaboratively with engineering and platform teams in a fast‑moving environment
• Hands‑on exposure to security controls such as IAM, encryption, logging, vulnerability scanning, and network security