Senior Cloud Security Engineer – AI & Cloud Posture

NRF United Kingdom; Greater London; Hybrid; GBP 100,000 - 130,000; Full time

Job summary

Norton Rose Fulbright in London is seeking a Senior Information Security Engineer to secure cloud platforms, cloud-native services, and AI solutions. You will protect identities, data, applications, and integrations across Azure, AWS, and SaaS environments, translating security requirements into practical, scalable controls.

The role combines hands-on cloud security engineering with governance, leading assessments, improving posture, and automating validation for complex enterprise environments.

Qualifications

• At least 5 years of cloud security, security engineering, or related discipline.
• Hands-on Azure and GCP security in large enterprises.
• Strong IAM, workload identities, least-privilege design knowledge.
• Experience with security posture management and vulnerability management.
• Ability to automate security processes and control validation.

Responsibilities

• Define and improve security controls across Azure, AWS, containers, and serverless workloads.
• Assess cloud architectures for identity, encryption, logging, and secure access.
• Lead investigations of cloud identities, privileged access, and misconfigurations.
• Embed secure-by-design guardrails throughout the technology lifecycle.
• Own cloud security posture and remediation tracking.
• Define security requirements for enterprise AI and AI-enabled SaaS.
• Build automation using PowerShell, Python, KQL and APIs.
• Create KPIs and executive-ready security reports.

Skills

Cloud security engineering

Cloud architecture

DevSecOps

Identity & access management

Least-privilege design

Threat modeling

Automation

Tools

PowerShell

Python

KQL

APIs

Job description

Norton Rose Fulbright in London is seeking a Senior Information Security Engineer to secure cloud platforms, cloud-native services, and AI solutions. You will protect identities, data, applications, and integrations across Azure, AWS, and SaaS environments, translating security requirements into practical, scalable controls.

The role combines hands-on cloud security engineering with governance, leading assessments, improving posture, and automating validation for complex enterprise environments.