Senior Cloud Security Engineer — Secure Cloud & IaC

Scottish Government; Glasgow; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

GDD pay supplement

Hybrid working

Glasgow or Dundee offices

Job summary

Social Security Scotland is seeking a Senior Cyber Security Engineer to design, implement and assure cyber controls across cloud platforms, applications and infrastructure. This fixed-term appointment for 47 months offers a hybrid working pattern with Glasgow or Dundee offices.

You will translate security policy into practical cloud solutions, lead governance and risk activities, and mentor engineers while embedding security throughout the delivery lifecycle.

Qualifications

• Experience implementing cloud native security controls such as IAM, encryption, key management, logging, and monitoring.
• Experience embedding security across the full delivery lifecycle, from early design through to live operations.
• Experience creating or implementing automated security controls and assurance, e.g. policy as code, configuration compliance, or security monitoring rules utilising IaC Tooling.

Responsibilities

• Design and deliver secure cloud architectures across IaaS, PaaS, and SaaS environments, embedding security controls aligned to organisational policy and industry best practice.
• Lead the implementation of cyber security standards and controls across cloud platforms, influencing delivery teams and ensuring security is built in from the outset.
• Provide senior cyber security consultancy, including cloud risk assessments, threat modelling, architecture reviews, audits, and contribution to cyber strategy.
• Work closely with Architecture teams to shape secure target architectures and ensure security requirements are reflected in technical designs.
• Lead and enhance cloud security operations, including but not limited to identity and access management, vulnerability management, logging, monitoring, and incident response.
• Design and implement automated security controls and assurance, including policy as code, secure configuration baselines, and continuous compliance.
• Translate security requirements into engineering level guidance, supporting developers and engineers to remediate issues and adopt secure coding and deployment practices.
• Engage with internal and external stakeholders, providing security assurance, clear risk articulation, and support for change associated with security improvements.
• Act as a technical mentor, championing cloud security best practice and supporting the development of engineers and security practitioners.
• Design, review, and implement secure cloud infrastructure using Infrastructure as Code (IaC) tooling (Terraform, CloudFormation) and providing assurance that environments are secure, consistent, and resilient.

Skills

Cloud security

Security architecture

IaC tooling

Risk & compliance

Tools

Terraform

CloudFormation

Job description

Social Security Scotland is seeking a Senior Cyber Security Engineer to design, implement and assure cyber controls across cloud platforms, applications and infrastructure. This fixed-term appointment for 47 months offers a hybrid working pattern with Glasgow or Dundee offices.

You will translate security policy into practical cloud solutions, lead governance and risk activities, and mentor engineers while embedding security throughout the delivery lifecycle.