Senior Cloud Security Engineer & Cloud Assurance Lead

Scottish Government; Glasgow; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

GDD pay supplement £4,000 annual

Hybrid working

Job summary

Social Security Scotland is seeking a Senior Cyber Security Engineer to secure cloud platforms delivering vital public services. You will lead security design, build tooling, and provide risk-based guidance across cloud, applications and infrastructure, working with Architecture, Cloud Engineering, DevOps and Product teams.

The role emphasizes secure by design, resilience, and compliance within a cloud-first environment and includes hands-on management of cyber security controls and tooling.

Qualifications

• Experience designing and delivering secure cloud architectures (IaaS, PaaS, SaaS).
• Experience embedding security across the full delivery lifecycle.
• Experience creating or implementing automated security controls and policy as code.

Responsibilities

• Design and deliver secure cloud architectures across IaaS, PaaS, and SaaS environments.
• Lead the implementation of cyber security standards across cloud platforms.
• Provide senior cyber security consultancy across technology projects.
• Collaborate with Architecture teams to shape secure target architectures.
• Lead cloud security operations including IAM, vulnerability management, logging, and incident response.
• Design and implement automated security controls and assurance.
• Translate security requirements into engineering guidance for developers.
• Engage stakeholders and provide security assurance and risk articulation.
• Mentor engineers and security practitioners in best practices.

Skills

Cloud security

IAM & encryption

Threat modelling

IaC tooling

Security operations

Vulnerability management

Tools

Terraform

CloudFormation

PKI

Monitoring tools

Job description

Social Security Scotland is seeking a Senior Cyber Security Engineer to secure cloud platforms delivering vital public services. You will lead security design, build tooling, and provide risk-based guidance across cloud, applications and infrastructure, working with Architecture, Cloud Engineering, DevOps and Product teams.

The role emphasizes secure by design, resilience, and compliance within a cloud-first environment and includes hands-on management of cyber security controls and tooling.