UK Remote Job – Cloud Security Engineer at Vesta Software Group

EasyInfoBlog.com LLC; United Kingdom; À distance; GBP 70 000 - 110 000; Plein temps

Résumé du poste

Vesta Software Group is seeking a Cloud Security Engineer to protect Azure cloud infrastructure, applications, data, and AI-enabled systems. The role emphasizes automating security controls, incident investigation, compliance support, and embedding security into daily engineering practices.

You will secure Azure subscriptions, identities, networks, Kubernetes, containers, servers and CI/CD pipelines while collaborating with R&D and Data teams to safeguard AI deployments and production

Qualifications

• Hands-on experience securing Azure in production.
• IAM, networking, Kubernetes, containers, OS and vulnerability management.
• Security monitoring, logging, incident response and remediation.
• Scripting, infrastructure automation and policy-as-code.
• Secure software development, CI/CD and secrets management.
• Investigate findings, assess severity and coordinate remediation.
• Strong documentation, analytical and problem-solving skills.
• Communicate security risks clearly to diverse audiences.
• Desirable: Azure/Kubernetes security certifications.
• Desirable: ISO 27001, PCI DSS or Cyber Essentials Plus experience.
• Desirable: Threat-modelling AI-enabled systems.

Responsabilités

• Secure and monitor cloud infrastructure, applications and deployment pipelines.
• Conduct security reviews and identify weaknesses in cloud configurations and platform designs.
• Develop automation for security monitoring, policy enforcement, vulnerability management and remediation.
• Investigate security incidents and coordinate corrective actions with relevant technical teams.
• Manage access controls, credentials, certificates and privileged accounts securely.
• Assess AI systems and agent-based workflows for potential security vulnerabilities.
• Support internal and external audits by maintaining technical evidence and addressing compliance gaps.
• Document risks, remediation progress and exceptions for accountability.
• Advise engineers on secure development practices and help integrate security into software delivery.
• Communicate technical risks clearly to technical and non-technical stakeholders.

Connaissances

Azure security

Identity management

Networking security

Kubernetes security

Containers security

Vulnerability management

Security monitoring

Incident response

Scripting skills

Automation pipelines

Secrets management

CI/CD security

Description du poste

Job Title: Cloud Security Engineer
Employer: Vesta Software Group
Job Type: Remote
Location: United Kingdom
Salary/Rate: Not Specified
UK Visa Sponsorship: Not Available

This Cloud Security Engineer role focuses on protecting Azure cloud infrastructure, applications, data and AI-enabled systems from security threats and vulnerabilities. The successful candidate will automate security controls, investigate incidents, support compliance requirements and work with engineering teams to embed security into everyday operations.

Description

Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.

Review cloud architectures, configurations and proposed changes to identify security risks before deployment.

Automate security configurations, vulnerability detection, policy checks, evidence collection and remediation.

Manage secrets, encryption keys, certificates, privileged access and service accounts.

Monitor security alerts and investigate suspicious activities, vulnerabilities, misconfigurations and control failures.

Prioritise remediation based on exploitability, exposure, business impact and existing safeguards.

Support incident response, evidence preservation, root-cause analysis and corrective actions.

Maintain records of security findings, assigned owners, deadlines, exceptions and accepted risks.

Assess security threats associated with AI-enabled services and autonomous agents.

Use approved AI tools for security investigations and analysis while protecting sensitive information.

Collaborate with Research and Development (R&D) and Data teams to embed security into AI development, APIs, data flows and deployment processes.

Establish safeguards governing AI access to production systems, credentials, logs and customer information.

Support compliance assessments and customer assurance activities involving ISO 27001, PCI DSS, Cyber Essentials Plus and GDPR.

Develop security standards, operational guides and runbooks, and coach engineers on secure cloud and AI practices.

Report significant security risks and trends to cloud operations, compliance managers and relevant stakeholders.

Responsibilities

Secure and monitor cloud infrastructure, applications and deployment pipelines.

Conduct security reviews and identify weaknesses in cloud configurations and platform designs.

Develop automation for security monitoring, policy enforcement, vulnerability management and remediation.

Investigate security incidents and coordinate corrective actions with relevant technical teams.

Manage access controls, credentials, certificates and privileged accounts securely.

Assess AI systems and agent-based workflows for potential security vulnerabilities.

Support internal and external audits by maintaining technical evidence and addressing compliance gaps.

Document risks, remediation progress and exceptions for accountability.

Advise engineers on secure development practices and help integrate security into software delivery.

Communicate technical risks clearly to technical and non-technical stakeholders.

Requirements

Hands-on experience securing Azure or another major cloud platform in a production environment.

Practical knowledge of identity and access management, networking, Kubernetes, containers, operating systems and vulnerability management.

Experience with security monitoring, logging, incident response and remediation.

Skills in scripting, infrastructure automation, policy-as-code or security automation.

Understanding of secure software development, CI/CD pipelines and secrets management.

Ability to investigate security findings, assess their severity and coordinate effective remediation.

Strong documentation, analytical and problem-solving skills.

Ability to communicate security risks clearly to different audiences.

Desirable: Azure security, Kubernetes security or recognised cybersecurity certifications.

Desirable: Experience with ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments.

Desirable: Experience threat-modelling AI-enabled systems, APIs or agentic automation.

Strong ownership, sound judgement, attention to detail and commitment to continuous learning.

Collaborative approach, with a willingness to share knowledge, review work and support colleagues.

Practical interest in responsible AI adoption and improving security processes.

Employment arrangement: Regular employment, as stated in the supplied listing.

Working hours: 37.5 scheduled hours per week.

Opportunity to work with Azure cloud security, cybersecurity automation and emerging AI technologies.

Exposure to security compliance frameworks and customer assurance activities.

Opportunities to collaborate with cloud operations, data and software engineering teams.

Scope to develop technical expertise in cloud security, AI risk management and security automation.