Senior Multi-Cloud Security Engineer

Spencer Rose Ltd; United Kingdom; Hybrid; GBP 45,000 - 55,000; Full time

Job summary

Spencer Rose Ltd is seeking a Senior Cloud Security Engineer to lead cloud security governance and automation across AWS, Azure, and GCP. You will design secure cloud architectures, implement guardrails, and drive remediation of findings while collaborating with engineering teams, auditors, and enterprise customers.

The role emphasizes Infrastructure-as-Code, cloud security automation, and secure-by-design principles, with a remote/hybrid working model across the UK & Ireland.

Qualifications

• Proven experience leading cloud security initiatives across AWS, Azure and GCP.
• Hands-on Terraform and CI/CD pipelines for security automation.
• Experience with cloud-native security tooling (Defender for Cloud, Security Hub, GuardDuty, Inspector).
• Strong IAM knowledge including AWS IAM, Entra ID, RBAC, PIM, privileged access controls.
• Automation using Python and/or PowerShell.
• Familiarity with ISO 27001, SOC 2, Cyber Essentials Plus.
• Experience working with customers, auditors, and security assessors.
• Excellent communication translating risk to business terms.

Responsibilities

• Lead cloud security governance across AWS, Azure and GCP.
• Design secure-by-design cloud architectures and guardrails.
• Drive remediation of findings and governance gaps.
• Define tagging, IAM and privileged access standards.
• Build and maintain security automation and IaC controls.
• Automate remediation and compliance validation processes.
• Support threat detection, incident investigations and vulnerability management.
• Collaborate with customers and auditors on security assessments.

Skills

Cloud security strategy across AWS/AZ/

Terraform

CI/CD pipelines

Cloud-native security tooling

IAM & Privileged access

Python

PowerShell

ISO 27001 / SOC 2 knowledge

Security governance

Customer & auditor liaison

Tools

Defender for Cloud

Security Hub

GuardDuty

Inspector

Qualys

Snyk

SonarQube

DRATA

GitLab

Bitwarden

AWS Lambda

Azure Functions

Logic Apps

Job description

Spencer Rose Ltd is seeking a Senior Cloud Security Engineer to lead cloud security governance and automation across AWS, Azure, and GCP. You will design secure cloud architectures, implement guardrails, and drive remediation of findings while collaborating with engineering teams, auditors, and enterprise customers.

The role emphasizes Infrastructure-as-Code, cloud security automation, and secure-by-design principles, with a remote/hybrid working model across the UK & Ireland.