3,646 Cloud Security jobs in the United Kingdom
Senior Information Security Engineer - Cloud Security
B1 1AA Birmingham, West Midlands
£70000 Annually
WhatJobs
Posted 4 days ago
Job Viewed
Job Description
Our client, a cutting-edge technology firm, is actively seeking a highly skilled Senior Information Security Engineer with specialized expertise in Cloud Security to join their fully remote security team. This role is critical in designing, implementing, and managing robust security controls across our cloud infrastructure (AWS, Azure, GCP). You will play a pivotal role in protecting our sensitive data and systems from evolving threats. The ideal candidate will possess a deep understanding of cloud security best practices, experience with security automation, and a proactive approach to identifying and mitigating vulnerabilities. Working remotely, you will collaborate with engineering and operations teams to embed security throughout the development lifecycle.
Responsibilities:
Responsibilities:
- Design, implement, and maintain security solutions for cloud environments (AWS, Azure, GCP).
- Develop and enforce cloud security policies, standards, and procedures.
- Implement and manage security controls such as WAF, IDS/IPS, vulnerability scanners, and security monitoring tools.
- Automate security tasks and processes using scripting languages (e.g., Python, Terraform) and CI/CD pipelines.
- Conduct security assessments and penetration testing of cloud infrastructure and applications.
- Respond to and investigate security incidents, ensuring swift containment and remediation.
- Monitor cloud environments for security threats and anomalies, developing effective detection mechanisms.
- Collaborate with development and operations teams to ensure security is integrated into the software development lifecycle (SDLC).
- Manage identity and access management (IAM) policies and configurations.
- Stay current with emerging cloud security threats, vulnerabilities, and technologies.
- Provide security guidance and training to engineering teams.
- Contribute to the development of disaster recovery and business continuity plans.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; Master's degree preferred.
- 5+ years of experience in information security, with a strong focus on cloud security engineering.
- Proven experience securing AWS, Azure, and/or GCP environments.
- Proficiency with cloud-native security services and tools.
- Strong understanding of networking, cryptography, and security protocols.
- Experience with infrastructure as code (IaC) tools like Terraform or CloudFormation.
- Proficiency in scripting languages such as Python, Bash, or PowerShell.
- Experience with SIEM, IDS/IPS, EDR, and other security monitoring technologies.
- Relevant certifications such as CISSP, CCSK, AWS Certified Security - Specialty, or Azure Security Engineer are highly desirable.
- Excellent analytical, problem-solving, and communication skills.
- Ability to work independently and collaboratively in a remote team environment.
This advertiser has chosen not to accept applicants from your region.
0
Principal Information Security Engineer - Cloud Security
NG1 3AN Nottingham, East Midlands
£80000 Annually
WhatJobs
Posted 13 days ago
Job Viewed
Job Description
Our client, a rapidly growing technology firm, is seeking a Principal Information Security Engineer with deep expertise in Cloud Security to join their dedicated security team. This role is critical in designing, implementing, and maintaining robust security measures across their cloud infrastructure (AWS, Azure, GCP). You will be responsible for threat modeling, vulnerability management, incident response, and developing security policies and procedures to protect sensitive data and systems. This hybrid position offers a blend of remote work flexibility and in-office collaboration to foster innovation and maintain a strong team dynamic.
Responsibilities:
Qualifications:
This is a critical role for an experienced security professional, based in Nottingham, Nottinghamshire, UK , offering a stimulating work environment and the chance to significantly enhance our security posture.
Responsibilities:
- Design, implement, and manage comprehensive cloud security solutions for AWS, Azure, and/or GCP environments.
- Develop and enforce security policies, standards, and best practices for cloud infrastructure.
- Conduct regular security assessments, penetration testing, and vulnerability scans.
- Lead threat modeling exercises to identify potential security risks and develop mitigation strategies.
- Manage and mature incident response processes, including detection, analysis, and remediation of security incidents.
- Implement and maintain security tools and technologies, such as WAFs, IDS/IPS, SIEM, and endpoint security solutions.
- Develop and automate security controls and compliance checks.
- Collaborate with development and operations teams to embed security throughout the SDLC (DevSecOps).
- Provide security guidance and training to technical teams.
- Stay up-to-date with the latest cloud security threats, vulnerabilities, and technologies.
- Ensure compliance with relevant regulations (e.g., GDPR, ISO 27001).
- Develop and maintain security documentation, runbooks, and architectural diagrams.
- Participate in security audits and assessments.
- Lead security initiatives and projects from inception to completion.
- Act as a subject matter expert for cloud security matters.
Qualifications:
- Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.
- Minimum of 7 years of experience in information security, with a strong focus on cloud security engineering.
- Proven expertise in securing major cloud platforms (AWS, Azure, GCP).
- In-depth knowledge of security principles, networking protocols, and cybersecurity technologies.
- Experience with infrastructure as code (IaC) tools (e.g., Terraform, CloudFormation) and CI/CD pipelines.
- Familiarity with scripting languages (e.g., Python, PowerShell) for automation.
- Experience with security frameworks and compliance standards (e.g., NIST, CIS Benchmarks, ISO 27001).
- Strong incident response and forensics capabilities.
- Excellent analytical, problem-solving, and decision-making skills.
- Professional security certifications (e.g., CISSP, CCSP, AWS Security Specialty) are highly desirable.
- Strong communication and interpersonal skills, with the ability to work effectively in a hybrid team environment.
This is a critical role for an experienced security professional, based in Nottingham, Nottinghamshire, UK , offering a stimulating work environment and the chance to significantly enhance our security posture.
This advertiser has chosen not to accept applicants from your region.
1
Senior Information Security Engineer - Cloud Security
G1 1DD Glasgow, Scotland
£75000 Annually
WhatJobs
Posted 20 days ago
Job Viewed
Job Description
Our client is seeking a highly skilled and experienced Senior Information Security Engineer with a specialization in Cloud Security for a fully remote position. This critical role involves designing, implementing, and managing robust security solutions for our client's cloud infrastructure (AWS, Azure, GCP). You will be responsible for protecting cloud-based assets, ensuring compliance with security policies, and responding to security incidents within the cloud environment. The ideal candidate will possess a deep understanding of cloud security principles, threat landscapes, and best practices for securing modern cloud architectures. Responsibilities include developing and enforcing cloud security policies, conducting security assessments, implementing identity and access management (IAM) controls, and leveraging security tools for monitoring and threat detection. You will work collaboratively with DevOps and engineering teams to embed security throughout the CI/CD pipeline and advocate for a security-first culture. This is a fully remote opportunity, allowing you to work from anywhere within the UK, offering maximum flexibility. We are looking for a proactive, self-motivated individual with excellent problem-solving skills and a passion for safeguarding cloud environments. Your expertise will be vital in mitigating risks, ensuring the confidentiality, integrity, and availability of cloud data and applications. Key skills include experience with infrastructure as code (IaC) security, container security, and security automation. You should also be adept at incident response within cloud platforms. We encourage continuous learning and staying ahead of evolving cloud security threats. This role offers significant scope for impact and professional development in a cutting-edge field.
Responsibilities:
Responsibilities:
- Design, implement, and manage security solutions for cloud environments (AWS, Azure, GCP).
- Develop and enforce cloud security policies, standards, and procedures.
- Conduct security assessments, vulnerability scanning, and penetration testing in the cloud.
- Implement and manage Identity and Access Management (IAM) solutions.
- Deploy and manage cloud-native security tools and services (e.g., firewalls, WAFs, SIEM).
- Develop and automate security controls using Infrastructure as Code (IaC) tools.
- Monitor cloud environments for security threats and respond to incidents.
- Collaborate with development and operations teams to integrate security into the CI/CD pipeline.
- Ensure compliance with relevant industry regulations and security frameworks.
- Provide expert guidance on cloud security best practices and emerging threats.
- Proven experience in information security engineering, with a strong focus on cloud security.
- In-depth knowledge of AWS, Azure, or GCP security services and best practices.
- Experience with security automation, Infrastructure as Code (IaC), and CI/CD security.
- Familiarity with container security (Docker, Kubernetes) and microservices security.
- Strong understanding of network security, cryptography, and IAM.
- Experience with security monitoring, logging, and incident response in cloud environments.
- Relevant certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, or CISSP.
- Excellent analytical, problem-solving, and communication skills.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Ability to work effectively in a fully remote, collaborative team environment.
This advertiser has chosen not to accept applicants from your region.
2
Lead Information Security Engineer - Cloud Security
LS1 2HQ Leeds, Yorkshire and the Humber
£80000 Annually
WhatJobs
Posted 20 days ago
Job Viewed
Job Description
Our client, a rapidly expanding FinTech company, is seeking an experienced and visionary Lead Information Security Engineer with a strong focus on Cloud Security to join their team. This is a fully remote position, allowing you to work from anywhere within the UK. You will be responsible for designing, implementing, and managing robust security strategies for their cloud infrastructure and services. This critical role requires deep expertise in cloud security principles, threat mitigation, and compliance, along with strong leadership capabilities.
Key Responsibilities:
Required Qualifications and Experience:
This fully remote opportunity offers the chance to shape the security posture of a growing organization and work on challenging, impactful projects. Our client provides a competitive salary, comprehensive benefits package, and excellent opportunities for professional development and career advancement.
Key Responsibilities:
- Develop and execute comprehensive cloud security strategies and architectures (AWS, Azure, GCP).
- Implement and manage security controls, policies, and procedures for cloud environments.
- Conduct security assessments, vulnerability scans, and penetration testing of cloud infrastructure.
- Design and implement solutions for identity and access management (IAM), data protection, and network security in the cloud.
- Monitor cloud security posture, detect and respond to security incidents, and manage threat intelligence.
- Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC 2, GDPR).
- Lead and mentor a team of information security engineers.
- Collaborate with development and operations teams to integrate security into the CI/CD pipeline (DevSecOps).
- Evaluate and recommend new security technologies and tools.
- Develop security awareness training for employees.
Required Qualifications and Experience:
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.
- Minimum of 7 years of experience in information security, with at least 4 years focused on cloud security.
- Expertise in securing major cloud platforms (AWS, Azure, GCP).
- Strong understanding of security best practices, threat modeling, and risk management.
- Proficiency with cloud security tools and services (e.g., WAF, IDS/IPS, SIEM, CASB).
- Experience with scripting languages (e.g., Python, Bash) for automation.
- Knowledge of containerization technologies (Docker, Kubernetes) and their security implications.
- Excellent leadership, communication, and stakeholder management skills.
- Relevant certifications such as CISSP, CCSP, AWS Certified Security - Specialty, Azure Security Engineer Associate are highly desirable.
- Ability to work independently and manage complex projects in a remote, fast-paced environment.
This fully remote opportunity offers the chance to shape the security posture of a growing organization and work on challenging, impactful projects. Our client provides a competitive salary, comprehensive benefits package, and excellent opportunities for professional development and career advancement.
This advertiser has chosen not to accept applicants from your region.
3
Principal Information Security Engineer - Cloud Security
L1 8JQ Liverpool, North West
£80000 Annually
WhatJobs
Posted 20 days ago
Job Viewed
Job Description
Our client, a globally recognized leader in cloud-based solutions, is actively seeking a Principal Information Security Engineer with extensive expertise in cloud security to join their team. This role is critical in designing, implementing, and maintaining the security architecture and posture of our expansive cloud infrastructure. As a fully remote position, you will have the opportunity to leverage your skills from anywhere in the UK, contributing to the protection of sensitive data and systems against evolving cyber threats. This is a senior-level position requiring deep technical knowledge and strategic thinking.
Key Responsibilities:
Essential Qualifications:
This is an outstanding opportunity for a seasoned cloud security professional to lead and innovate within a dynamic, fully remote setting. If you are passionate about securing cloud environments and possess a proactive, security-first mindset, we encourage you to apply.
Key Responsibilities:
- Design, implement, and manage robust security solutions for cloud environments (AWS, Azure, GCP), including identity and access management (IAM), network security, data encryption, and vulnerability management.
- Develop and enforce cloud security policies, standards, and best practices.
- Conduct regular security assessments, penetration testing, and risk analysis of cloud infrastructure and applications.
- Lead incident response efforts for security breaches in cloud environments, including investigation, containment, eradication, and recovery.
- Collaborate with cloud engineering and development teams to integrate security into the CI/CD pipeline and application development lifecycle.
- Evaluate and recommend new security technologies and tools to enhance cloud security posture.
- Develop and maintain security documentation, including architectural diagrams, runbooks, and procedures.
- Provide expert guidance and mentorship to junior security engineers and IT staff on cloud security best practices.
- Stay abreast of the latest cybersecurity threats, vulnerabilities, and mitigation strategies, particularly in the context of cloud computing.
- Ensure compliance with relevant industry regulations and standards (e.g., GDPR, ISO 27001, SOC 2).
- Automate security tasks and processes to improve efficiency and reduce human error.
- Develop and deliver security awareness training related to cloud security for relevant personnel.
- Participate in architectural review boards to ensure security is embedded in new cloud initiatives.
- Troubleshoot and resolve complex security issues within the cloud infrastructure.
Essential Qualifications:
- Master's or Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related technical field.
- A minimum of 8 years of progressive experience in information security, with at least 5 years specifically focused on cloud security engineering.
- Deep hands-on experience with major cloud platforms (AWS, Azure, GCP), including their security services and configurations.
- Proven expertise in implementing and managing cloud security tools such as WAFs, IDS/IPS, SIEM, DLP, and vulnerability scanners.
- Strong understanding of networking concepts, protocols, and security principles (e.g., TCP/IP, DNS, VPNs, firewalls).
- Proficiency in scripting and automation languages (e.g., Python, Bash, PowerShell).
- Experience with containerization technologies (Docker, Kubernetes) and their security implications.
- In-depth knowledge of security frameworks, compliance regulations, and risk management methodologies.
- Excellent analytical, problem-solving, and critical thinking skills.
- Exceptional communication, leadership, and interpersonal skills.
- Relevant cloud security certifications (e.g., AWS Certified Security - Specialty, Azure Security Engineer Associate, CISSP, CCSP) are highly desirable.
- Ability to work independently and effectively in a remote team environment.
This is an outstanding opportunity for a seasoned cloud security professional to lead and innovate within a dynamic, fully remote setting. If you are passionate about securing cloud environments and possess a proactive, security-first mindset, we encourage you to apply.
This advertiser has chosen not to accept applicants from your region.
4
Information Security Analyst - Cloud Security
CF10 1AA Cardiff, Wales
£50000 Annually
WhatJobs
Posted 9 days ago
Job Viewed
Job Description
Our client is seeking a diligent and skilled Information Security Analyst specializing in Cloud Security to join their team. This is a fully remote position, allowing you to secure our client's digital assets from anywhere in the UK. You will be responsible for implementing, monitoring, and maintaining security controls within cloud environments (AWS, Azure, GCP), identifying vulnerabilities, and responding to security incidents. This role requires a deep understanding of cloud security best practices, threat landscapes, and regulatory compliance.
Key Responsibilities:
Key Responsibilities:
- Design, implement, and manage security measures for cloud infrastructure (AWS, Azure, GCP).
- Conduct regular security assessments, vulnerability scans, and penetration testing.
- Monitor cloud environments for security threats and anomalies, and respond to security incidents effectively.
- Develop and enforce cloud security policies, standards, and procedures.
- Ensure compliance with relevant data protection regulations (e.g., GDPR, ISO 27001).
- Collaborate with development and operations teams to integrate security into the CI/CD pipeline.
- Manage identity and access management (IAM) within cloud platforms.
- Investigate security breaches and other cybersecurity incidents, providing incident response and forensic analysis.
- Stay up-to-date with the latest cloud security threats, technologies, and best practices.
- Provide security awareness training to staff.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Proven experience in information security, with a strong focus on cloud security.
- Hands-on experience with major cloud platforms (AWS, Azure, GCP) and their security services.
- Knowledge of security frameworks, standards, and compliance requirements.
- Experience with SIEM tools, intrusion detection/prevention systems, and firewalls.
- Proficiency in scripting languages (e.g., Python, PowerShell) for automation is a plus.
- Strong analytical and problem-solving skills.
- Excellent communication and collaboration skills, especially in a remote setting.
- Relevant security certifications (e.g., CISSP, CCSP, AWS Certified Security – Specialty) are highly desirable.
- Ability to work independently and manage multiple security initiatives.
This advertiser has chosen not to accept applicants from your region.
5
Information Security Architect - Cloud Security
LE1 6GU Leicester, East Midlands
£80000 Annually
WhatJobs
Posted 20 days ago
Job Viewed
Job Description
Our client is a leading technology firm seeking a highly skilled Information Security Architect specializing in cloud security. This hybrid role involves on-site collaboration at our Leicester, Leicestershire, UK office and remote work flexibility. You will be responsible for designing, implementing, and maintaining robust security architectures for cloud environments, ensuring the protection of sensitive data and systems against evolving threats. The ideal candidate will possess deep expertise in cloud security best practices, threat modeling, vulnerability management, and security controls across major cloud platforms (AWS, Azure, GCP). You will play a critical role in developing and enforcing security policies, standards, and procedures, and guiding development teams on secure coding practices and cloud deployment strategies. Key responsibilities include conducting security assessments, recommending security enhancements, and responding to security incidents. This position requires strong analytical skills, excellent problem-solving abilities, and the capacity to articulate complex security concepts to both technical and non-technical stakeholders. Experience with identity and access management (IAM), encryption, network security, and security automation is essential. If you are a forward-thinking security professional passionate about safeguarding cloud infrastructures, we invite you to apply.
Responsibilities:
Responsibilities:
- Design and implement secure cloud architectures (AWS, Azure, GCP).
- Develop and enforce cloud security policies, standards, and procedures.
- Conduct security assessments and penetration testing of cloud environments.
- Implement and manage security controls, including IAM, encryption, and network security.
- Perform threat modeling and vulnerability assessments.
- Respond to and manage security incidents in the cloud.
- Collaborate with development and operations teams on secure coding and deployment.
- Provide guidance on security best practices for cloud services.
- Stay current with emerging cloud security threats and technologies.
- Automate security processes and workflows where possible.
- Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree or relevant certifications (CISSP, CCSP, AWS Security Specialty) are a plus.
- Proven experience as an Information Security Architect with a strong focus on cloud security.
- In-depth knowledge of major cloud platforms and their security features.
- Expertise in security frameworks, such as NIST, ISO 27001, and CIS Benchmarks.
- Proficiency in scripting and automation tools for security tasks.
- Strong understanding of networking, cryptography, and secure software development lifecycle.
- Excellent analytical, problem-solving, and communication skills.
- Ability to work effectively in a hybrid work environment.
This advertiser has chosen not to accept applicants from your region.
Be The First To Know
About the latest Cloud security Jobs in United Kingdom !
6
Information Security Architect - Cloud Security
M1 1AA Manchester, North West
£70000 Annually
WhatJobs
Posted 20 days ago
Job Viewed
Job Description
Our client, a leading enterprise in the technology sector, is seeking a highly experienced Information Security Architect with specialized expertise in cloud security to join their esteemed team in Manchester, Greater Manchester, UK . This critical role will involve designing, implementing, and maintaining robust security architectures for cloud environments, ensuring the protection of sensitive data and systems against sophisticated threats. You will be responsible for defining security standards, conducting risk assessments, and advising on best practices for cloud adoption and operation. This position offers a significant opportunity to shape the security posture of a major organisation at the forefront of technological innovation.
Key Responsibilities:
Key Responsibilities:
- Design and implement secure cloud architectures across various platforms (e.g., AWS, Azure, GCP), ensuring alignment with business requirements and security best practices.
- Develop and enforce cloud security policies, standards, and procedures.
- Conduct security risk assessments and develop mitigation strategies for cloud deployments.
- Define and oversee the implementation of security controls for identity and access management, data protection, network security, and application security within cloud environments.
- Collaborate with engineering, operations, and development teams to integrate security into the cloud lifecycle (DevSecOps).
- Evaluate and recommend new cloud security technologies and solutions.
- Develop incident response plans specific to cloud environments and participate in incident management.
- Provide technical guidance and mentorship on cloud security best practices to internal teams.
- Ensure compliance with relevant regulatory requirements (e.g., GDPR, PCI DSS) for cloud operations.
- Stay updated on the latest cloud security threats, vulnerabilities, and industry trends.
- Master's degree in Computer Science, Information Security, or a related field.
- Minimum of 8 years of progressive experience in information security, with at least 4 years focused on cloud security architecture.
- Deep understanding of cloud computing concepts and services from major providers (AWS, Azure, GCP).
- Proven experience in designing and implementing security solutions for IaaS, PaaS, and SaaS environments.
- Expertise in areas such as identity and access management (IAM), encryption, network segmentation, and vulnerability management in the cloud.
- Strong knowledge of security frameworks and compliance standards applicable to cloud environments.
- Excellent analytical, problem-solving, and strategic thinking skills.
- Outstanding communication, presentation, and interpersonal skills, with the ability to influence technical and business stakeholders.
- Relevant cloud security certifications (e.g., AWS Certified Security - Specialty, Azure Security Engineer Associate, CISSP) are highly desirable.
- Experience with infrastructure-as-code (IaC) and security automation tools is a plus.
This advertiser has chosen not to accept applicants from your region.
7
Senior Information Security Analyst - Cloud Security
LS2 7AA Leeds, Yorkshire and the Humber
£60000 Annually
WhatJobs
Posted today
Job Viewed
Job Description
Our client, a rapidly growing technology firm committed to maintaining the highest standards of digital security, is seeking a Senior Information Security Analyst with a specialization in Cloud Security to join their team. While the office is based in Leeds, West Yorkshire, UK , this role offers the flexibility of remote work for suitable candidates. You will be at the forefront of protecting our client's cloud infrastructure and sensitive data against evolving cyber threats. Responsibilities include designing, implementing, and managing security controls across various cloud platforms (AWS, Azure, GCP), conducting vulnerability assessments and penetration testing, and responding to security incidents. The ideal candidate will possess a deep understanding of cloud security best practices, threat intelligence, and security frameworks (e.g., ISO 27001, NIST). You will be involved in developing and refining security policies, procedures, and guidelines for cloud environments. Key tasks include monitoring security logs, analyzing security alerts, and orchestrating incident response activities to minimize impact. The ability to automate security processes and implement advanced threat detection solutions is highly valued. You will work collaboratively with IT operations, development teams, and other security professionals to ensure a robust security posture. This role requires excellent analytical, problem-solving, and communication skills, with the ability to articulate technical risks and recommendations to both technical and non-technical audiences. A proactive and vigilant mindset is essential in this critical role.
Responsibilities:
Responsibilities:
- Develop and implement security strategies for cloud environments (AWS, Azure, GCP).
- Conduct regular vulnerability assessments and penetration tests of cloud infrastructure.
- Monitor security systems and respond effectively to security incidents and threats.
- Design and maintain security policies, standards, and procedures for cloud adoption.
- Implement and manage security controls, including identity and access management, encryption, and network security.
- Analyze security logs and alerts to identify potential breaches or vulnerabilities.
- Collaborate with IT and development teams to ensure security is integrated into the software development lifecycle (SDLC).
- Stay current with emerging cloud security threats, technologies, and best practices.
- Develop and deliver security awareness training for employees.
- Contribute to the continuous improvement of the organization's overall security posture.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 5 years of experience in information security, with a strong focus on cloud security.
- In-depth knowledge of cloud platforms (AWS, Azure, GCP) and their security services.
- Experience with security frameworks (ISO 27001, NIST CSF) and compliance requirements.
- Proficiency in security tools such as SIEM, vulnerability scanners, and endpoint detection and response (EDR).
- Strong understanding of networking, encryption, and authentication protocols.
- Excellent analytical, problem-solving, and incident response skills.
- Relevant certifications (e.g., CISSP, CCSP, AWS Certified Security) are highly desirable.
- Must be eligible to work in the UK.
This advertiser has chosen not to accept applicants from your region.
8
Senior Information Security Analyst - Cloud Security
EH1 2LE Edinburgh, Scotland
£60000 Annually
WhatJobs
Posted 1 day ago
Job Viewed
Job Description
Our client, a rapidly growing technology firm, is seeking a highly skilled Senior Information Security Analyst with a specialization in Cloud Security to join their established security operations team. Based in **Edinburgh, Scotland, UK**, this role operates on a hybrid model, offering a blend of remote flexibility and in-office collaboration. You will be responsible for the continuous monitoring, assessment, and enhancement of the organisation's cloud security posture, ensuring the protection of sensitive data and critical infrastructure against evolving cyber threats. Your expertise will be crucial in designing, implementing, and managing robust cloud security controls across platforms such as AWS, Azure, and GCP.
Key responsibilities include conducting regular security assessments and penetration tests, identifying vulnerabilities, and developing remediation strategies. You will lead incident response activities related to cloud environments, investigating security breaches, and implementing measures to prevent recurrence. This role involves working closely with development and operations teams to embed security best practices into the cloud development lifecycle (DevSecOps). You will also be responsible for developing and maintaining security policies, standards, and procedures relevant to cloud deployments. Staying ahead of the threat landscape and emerging cloud security technologies is paramount. The Senior Analyst will also play a key role in compliance efforts, ensuring adherence to relevant industry regulations and frameworks.
Key Responsibilities:
Key responsibilities include conducting regular security assessments and penetration tests, identifying vulnerabilities, and developing remediation strategies. You will lead incident response activities related to cloud environments, investigating security breaches, and implementing measures to prevent recurrence. This role involves working closely with development and operations teams to embed security best practices into the cloud development lifecycle (DevSecOps). You will also be responsible for developing and maintaining security policies, standards, and procedures relevant to cloud deployments. Staying ahead of the threat landscape and emerging cloud security technologies is paramount. The Senior Analyst will also play a key role in compliance efforts, ensuring adherence to relevant industry regulations and frameworks.
Key Responsibilities:
- Monitor and manage the security of cloud infrastructure (AWS, Azure, GCP).
- Conduct vulnerability assessments, penetration testing, and security audits.
- Lead incident response for cloud security events, including investigation and remediation.
- Develop and implement cloud security policies, standards, and best practices.
- Collaborate with DevOps teams to integrate security into the CI/CD pipeline.
- Manage security tools and technologies for cloud environments.
- Stay updated on the latest cloud security threats, trends, and technologies.
- Ensure compliance with relevant security regulations and frameworks.
- Provide security guidance and support to internal teams.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 5 years of experience in information security, with a strong focus on cloud security.
- Hands-on experience with major cloud platforms (AWS, Azure, GCP) and their security services.
- Proficiency in security assessment tools and techniques.
- Experience with incident response and forensics.
- Understanding of DevSecOps principles and practices.
- Knowledge of security frameworks (e.g., ISO 27001, NIST) and compliance requirements.
- Relevant certifications such as CISSP, CCSP, AWS Certified Security – Specialty are highly desirable.
- Excellent analytical, problem-solving, and communication skills.
- This hybrid role requires regular attendance at our **Edinburgh** office.
This advertiser has chosen not to accept applicants from your region.
9