Cloud Security Engineer

Vesta Software Group; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Gladstone Software is seeking a Cloud Security Engineer to safeguard its cloud platforms and services across Azure, Kubernetes, networks, identities and data. The role emphasizes AI-enabled working, secure-by-design practices, and collaboration with R&D and Data teams to embed strong security into AI-enabled systems.

You will lead secure configuration, incident response, vulnerability management and governance across multi-cloud components while maintaining evidence, risk, and compliance records

Qualifications

• Hands-on experience securing Azure in production.
• Knowledge of identity and access management, networking, Kubernetes/containers, operating systems, vulnerability management, logging and incident response.
• Ability to investigate and prioritize technical security findings and implement or coordinate effective remediation.
• Experience with scripting, policy-as-code, infrastructure automation or security automation.
• Understanding of secure development and deployment practices, including secrets and pipeline security.
• Clear documentation and communication of technical risk to different audiences.

Responsibilities

• Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.
• Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production.
• Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation where appropriate.
• Support secrets, key, certificate, privileged-access and service-account lifecycle management.
• Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures.
• Prioritize remediation using exploitability, exposure, business impact and compensating controls rather than severity labels alone.
• Support security incident response, evidence preservation, root-cause analysis and completion of corrective actions.
• Maintain clear security findings, owners, due dates, exceptions and risk acceptance records.
• Threat model AI-enabled services and operational agents, including data leakage, prompt injection, over-permission, unsafe actions, supplier risk and inadequate human oversight.
• Use approved AI tools to support security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data.
• Work with R&D and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns.
• Define and test guardrails for AI access to production systems, credentials, logs and customer information.
• Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity.
• Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working.
• Report material risks and trends clearly to the Cloud Operations Manager, Compliance Manager and relevant owners.

Skills

Azure

Identity & IAM

Networking

Kubernetes

Containers

Vulnerability management

Incident response

Scripting

Policy as code

Automation

Secure dev practices

Documentation

Job description

Job Description:

Cloud Security Engineer

POSITION SUMMARY

The Cloud Security Engineer protects Gladstone’s cloud platforms and services through secure design, configuration, monitoring, automation and evidence-led remediation. The role works across Azure, Kubernetes, networks, identity, workloads, data and delivery pipelines, and supports the safe adoption of AI-enabled systems and operational tooling.

AI-ENABLED WORKING
AI-enabled working is a core expectation of this role. The role holder will use approved AI tools and automation to improve quality, speed, insight and consistency; validate outputs before acting on them; protect customer, employee and company data; and share effective practices with colleagues. Performance will be assessed through outcomes such as quality, reliability, cycle time, risk control and knowledge transfer - not simply the volume of AI-generated output or frequency of tool use.

KEY RESPONSIBILITIES

Cloud Security Engineering

• Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.
• Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production.
• Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation where appropriate.
• Support secrets, key, certificate, privileged-access and service-account lifecycle management.

Detection, Response and Vulnerability Management

• Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures.
• Prioritise remediation using exploitability, exposure, business impact and compensating controls rather than severity labels alone.
• Support security incident response, evidence preservation, root-cause analysis and completion of corrective actions.
• Maintain clear security findings, owners, due dates, exceptions and risk acceptance records.

AI and Application Security

• Threat model AI-enabled services and operational agents, including data leakage, prompt injection, over-permission, unsafe actions, supplier risk and inadequate human oversight.
• Use approved AI tools to support security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data.
• Work with R&D and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns.
• Define and test guardrails for AI access to production systems, credentials, logs and customer information.

Compliance and Security Culture

• Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity.
• Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working.
• Report material risks and trends clearly to the Cloud Operations Manager, Compliance Manager and relevant owners.

EXPERIENCE, KNOWLEDGE AND SKILLS

Essential

• Hands-on experience securing Azure or another major cloud platform in a production environment.
• Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response.
• Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation.
• Experience with scripting, policy-as-code, infrastructure automation or security automation.
• Understanding of secure development and deployment practices, including secrets and pipeline security.
• Clear documentation and communication of technical risk to different audiences.

Desirable

• Azure security, Kubernetes security or recognised cyber-security certification.
• Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments.
• Experience threat modelling AI-enabled systems, APIs or agentic automation.

PERSONAL ATTRIBUTES

• High ownership, sound judgment and a bias toward solving problems rather than moving them between teams.
• Curious and adaptable, with a practical commitment to continuous learning and responsible AI adoption.
• Systematic, evidence-led problem solving and attention to detail.
• Clear communication with both technical and non-technical colleagues.
• Collaborative working style and willingness to share knowledge, review work and support others.

Business Unit:

Gladstone Software

Scheduled Weekly Hours:

37.5

Number of Openings Available:

1

Worker Type:

Regular

More About Jonas Software:

Jonas Software is a leading provider of enterprise management software solutions, serving a wide range of vertical markets including hospitality, healthcare, construction, education, personal care, fitness, leisure, moving and legal services, to name a few. Within these markets, Jonas is comprised of over 65 distinct brands, each a respected leader in its domain.

Jonas’ vision is to be the branded global leader across these verticals and to be recognized by customers and industry stakeholders as the trusted provider of “Software for Life.” We are committed to technology, product innovation, quality, and exceptional customer service.

Jonas Software supports over 60,000 customers in more than 30 countries. We employ over 6,000 skilled professionals, including industry experts and technology specialists. Across its broader network, we support a global workforce of more than 30,000 employees.

Headquartered in Canada, Jonas Software has a global footprint with offices around the world. We’re a 100% owned subsidiary of Constellation Software Inc., based in Toronto, publicly listed on the TSX (CSU.TO), and a member of the S&P/TSX 60 Index.