Senior Cloud Security Engineer — AI & Identity

Norton Rose Fulbright LLP; Newcastle upon Tyne; On-site; GBP 85,000 - 120,000; Full time

Job summary

Norton Rose Fulbright LLP is seeking a Senior Information Security Engineer to secure cloud platforms, AI solutions, and associated identities in a global security program. The role emphasizes hands-on engineering, governance, and risk-based guidance to senior stakeholders.

You will lead cloud security assessments, define secure patterns, and develop automated controls while collaborating with architects, developers, and service owners across Azure, GCP, SaaS, containers, and serverless

Qualifications

• At least 5 years of relevant experience in cloud security, security engineering, cloud architecture, DevSecOps, or a closely related technical discipline.
• Recent hands-on experience securing public-cloud environments such as Azure and GCP in a large or complex enterprise.
• Strong knowledge of cloud identity and access management, workload identities, privileged access, federation, conditional access, service principals, managed identities, and least‑privilege design.
• Demonstrable experience assessing cloud architectures and configurations across compute, storage, databases, networking, containers, serverless technologies, APIs, key management, secrets management, and logging.
• Practical experience with cloud security posture management, cloud workload protection, vulnerability management, attack-surface management, and risk-based remediation.
• Experience defining or evaluating security controls for generative AI, enterprise copilots, AI agents, machine-learning platforms, or AI-enabled SaaS solutions.
• Understanding of AI-specific security risks, including prompt injection, sensitive-data exposure, insecure tool or agent actions, excessive permissions, third-party model risk, and insufficient monitoring or governance.
• Ability to automate security processes and control validation using PowerShell, Python, KQL, APIs, policy-as-code, infrastructure-as-code, cloud-native functions, or comparable technologies.
• Experience reviewing cloud solution designs and integrations for authentication, authorization, network controls, encryption, data protection, logging, monitoring, resilience, and secure operational ownership.
• Ability to troubleshoot complex technical issues across cloud, identity, application, API, network, data, and security-monitoring layers.

Responsibilities

• Define and continuously improve security controls and reference patterns across Azure, AWS, cloud-native services, SaaS platforms, containers, serverless workloads, virtual machines, storage, databases, APIs, and supporting network services.
• Assess cloud architectures and configurations for identity, network exposure, encryption, secrets management, key management, logging, resilience, data protection, and secure administrative access.
• Lead technical investigations involving cloud identities, service principals, managed identities, workload identities, API permissions, privileged access, exposed services, misconfiguration, and suspicious cloud activity.
• Embed security into cloud engineering and delivery practices by working with architects, platform teams, developers, and service owners to apply secure-by-design guardrails throughout the technology lifecycle.

Skills

Cloud security engineering

Azure

GCP

IAM / Privileged access

Security governance

Automation (PowerShell, Python)

Threat modeling

Security incident response

Tools

KQL

APIs

Infrastructure-as-code

Job description

Norton Rose Fulbright LLP is seeking a Senior Information Security Engineer to secure cloud platforms, AI solutions, and associated identities in a global security program. The role emphasizes hands-on engineering, governance, and risk-based guidance to senior stakeholders.

You will lead cloud security assessments, define secure patterns, and develop automated controls while collaborating with architects, developers, and service owners across Azure, GCP, SaaS, containers, and serverless