127 Cloud Security Specialists jobs in the United Kingdom

Cloud Security Engineer required by market leading, award winning organisation based in Central Bristol (5 minute walk from Bristol Temple Meads). 

The successful Cloud Security Engineer will join a small, collaborative security team within a large, people-focused organisation. This is a hybrid role requiring 2 days a week in a vibrant Central Bristol office.

This is a fantastic opportunity to play a key role in shaping the security operations of a national business that places wellbeing, innovation, and employee development at the heart of its culture. You'll be working alongside passionate professionals who are committed to building secure, scalable, and resilient systems that support a positive end-user experience.

The Role: What You’ll Be Doing

• Network Security – Design and maintain secure network infrastructures, monitor traffic, respond to suspicious activity, and conduct audits to ensure compliance.
li>Vulnerability Analysis – Carry out regular assessments and penetration tests, develop mitigation strategies, and report on remediation progress. < i>Incident Response – Lead incident detection, containment, and recovery efforts; conduct post-incident reviews and recommend improvements. < i>Forensic Analysis – Investigate incidents, perform root cause analysis, preserve digital evidence, and produce forensic reports. < i>Security Tools – Manage tools such as firewalls, IDS/IPS systems, and endpoint protection solutions; evaluate and recommend new technologies. < i>Documentation – Maintain detailed logs and reports of incidents, assessments, and analyses for internal stakeholders. < i>Collaboration – Partner with IT, development, and digital teams to embed security across all initiatives. < i>Ongoing Development – Stay current with emerging threats and industry best practices through regular training and self-development.

What We’re Looking For

• < i>Security Tools Proficiency – Hands-on experience with Palo Alto firewalls, IDS/IPS, and endpoint protection.
< i>Network Security Knowledge – Deep understanding of VPNs, network protocols, and security architecture. < i>Incident Management – Proven ability to detect, analyse, and resolve security threats and malware. < i>Vulnerability Management – Experience in identifying and mitigating system vulnerabilities. < i>Automation Skills – Proficiency in security automation using scripting tools like Python or PowerShell. < i>Frameworks & Compliance – Familiarity with ISO 27001, NIST 800-53, Cyber Essentials, and GDPR. < i>Risk Management – Strong grasp of risk assessment methodologies and security control frameworks. < i>Communication – Able to communicate technical concepts clearly to both technical and non-technical stakeholders. < i>Project Management – Experience managing security projects and working with cross-functional teams. < i>Certifications – Relevant qualifications such as CEH, CCSP, CompTIA Security+, or AWS/Azure certs are highly desirable.

This fantastic role come with a highly competitive salary which is reviewed annually, and comes with an excellent benefits package which includes a 10% annual bonus, 25 days paid holiday, a flexible pension scheme, flexible working opportunities, shared Parental Leave - 18 weeks full pay, continued investment in your career, Bike to Work, discounts and many more.

Cloud Security Engineer required by market leading, award winning organisation based in Central Bristol (5 minute walk from Bristol Temple Meads). 

The successful Cloud Security Engineer will join a small, collaborative security team within a large, people-focused organisation. This is a hybrid role requiring 2 days a week in a vibrant Central Bristol office.

This is a fantastic opportunity to play a key role in shaping the security operations of a national business that places wellbeing, innovation, and employee development at the heart of its culture. You'll be working alongside passionate professionals who are committed to building secure, scalable, and resilient systems that support a positive end-user experience.

The Role: What You’ll Be Doing

• Network Security – Design and maintain secure network infrastructures, monitor traffic, respond to suspicious activity, and conduct audits to ensure compliance.
li>Vulnerability Analysis – Carry out regular assessments and penetration tests, develop mitigation strategies, and report on remediation progress. < i>Incident Response – Lead incident detection, containment, and recovery efforts; conduct post-incident reviews and recommend improvements. < i>Forensic Analysis – Investigate incidents, perform root cause analysis, preserve digital evidence, and produce forensic reports. < i>Security Tools – Manage tools such as firewalls, IDS/IPS systems, and endpoint protection solutions; evaluate and recommend new technologies. < i>Documentation – Maintain detailed logs and reports of incidents, assessments, and analyses for internal stakeholders. < i>Collaboration – Partner with IT, development, and digital teams to embed security across all initiatives. < i>Ongoing Development – Stay current with emerging threats and industry best practices through regular training and self-development.

What We’re Looking For

• < i>Security Tools Proficiency – Hands-on experience with Palo Alto firewalls, IDS/IPS, and endpoint protection.
< i>Network Security Knowledge – Deep understanding of VPNs, network protocols, and security architecture. < i>Incident Management – Proven ability to detect, analyse, and resolve security threats and malware. < i>Vulnerability Management – Experience in identifying and mitigating system vulnerabilities. < i>Automation Skills – Proficiency in security automation using scripting tools like Python or PowerShell. < i>Frameworks & Compliance – Familiarity with ISO 27001, NIST 800-53, Cyber Essentials, and GDPR. < i>Risk Management – Strong grasp of risk assessment methodologies and security control frameworks. < i>Communication – Able to communicate technical concepts clearly to both technical and non-technical stakeholders. < i>Project Management – Experience managing security projects and working with cross-functional teams. < i>Certifications – Relevant qualifications such as CEH, CCSP, CompTIA Security+, or AWS/Azure certs are highly desirable.

This fantastic role come with a highly competitive salary which is reviewed annually, and comes with an excellent benefits package which includes a 10% annual bonus, 25 days paid holiday, a flexible pension scheme, flexible working opportunities, shared Parental Leave - 18 weeks full pay, continued investment in your career, Bike to Work, discounts and many more.

Role Profile - Cloud Security Engineer

Purpose:
A leading insurance sector client is seeking a highly skilled and experienced Cloud Security Engineer to play a critical role in advancing the organization's cloud security capabilities. The successful candidate will lead the design, implementation, and continuous improvement of cloud security across multi-cloud platforms-primarily Google Cloud Platform (GCP) and Microsoft Azure. This role is essential in ensuring that all cloud infrastructure, services, and data remain protected, compliant, and resilient against emerging cyber threats. Working within the broader technology and security teams, the Cloud Security Engineer will be responsible for policy enforcement, incident response, security tooling, and embedding security across the development lifecycle.

Key Responsibilities:

• Develop, implement, and maintain comprehensive cloud security policies, standards, and technical controls for GCP and Azure environments.

• Configure, manage, and optimize native cloud security tools such as GCP Security Command Center, Cloud IAM, VPC Service Controls, Azure Security Center, Microsoft Defender for Cloud, and Azure Active Directory.

• Lead regular vulnerability assessments, security audits, and penetration testing activities across the cloud infrastructure and hosted applications.

• Monitor cloud platforms for security threats, suspicious activity, misconfigurations , and vulnerabilities using automated tools and custom detection methods.

• Act as a key lead in cloud security incident response , including triage, analysis, containment, and remediation.

• Work closely with development and DevOps teams to integrate security best practices into CI/CD pipelines, infrastructure-as-code deployments, and cloud-native services.

• Provide security architecture guidance on the secure design of applications, networking, storage, and identity management across multi-cloud environments.

• Collaborate with risk, compliance, and governance teams to ensure alignment with relevant industry regulations and frameworks , such as ISO 27001, NIST, or CIS.

• Where applicable, assess and enhance the security configuration of Salesforce , ensuring effective data protection and access management.

Desirable Skills and Experience:

• 6+ years of experience in cloud security, information security, or related technical roles.

• Proven hands-on experience securing Google Cloud Platform (GCP) , with in-depth understanding of its security services and capabilities.

• Strong knowledge of Azure and Microsoft 365 cloud security controls and best practices.

• Deep understanding of cloud security architecture , the shared responsibility model, and infrastructure-as-code security principles.

• Experience with threat modelling, incident response, and forensic analysis in cloud environments.

• Familiarity with container security, Kubernetes, and hybrid or multi-cloud deployments is advantageous.

• Preferred certifications:

  • Google Professional Cloud Security Engineer

  • Microsoft Azure Security Engineer Associate (AZ-500)

  • Certified Cloud Security Professional (CCSP)

Key Attributes:

• Excellent communicator , able to explain technical security concepts to non-technical audiences.

• Naturally inquisitive and investigative , always looking for potential risks or improvements.

• Highly detail-oriented , structured, and able to follow and improve processes.

• Strong collaboration and influencing skills , with the ability to work across business and technical teams.

• Resilient under pressure, able to prioritize competing workloads in a fast-paced environment.

• Passion for continuous learning and keeping up with the latest cloud and cybersecurity trends .

Culture & Conduct:

• Act as a security ambassador , promoting strong security culture within technical and business teams.

• Exhibit behaviour aligned with the insurance sector client's values and code of conduct , maintaining the highest standards of professionalism and ethical responsibility.

Cloud Security Engineer – Contract (Inside IR35)

Hybrid 2/3 days from the London office

We are seeking an experienced Cloud Security Engineer with a strong emphasis on AWS. The successful candidate will be responsible for designing, implementing, and maintaining secure cloud infrastructure, ensuring a robust security posture and supporting continuous delivery of our applications.

Key Responsibilities:

• Design and implement secure AWS cloud infrastructure, focusing on system architecture, Identity and Access Management (IAM), encryption, data protection, and network security.
• Collaborate with the Information Security and application teams to drive cloud security initiatives and align with the broader security strategy.
• Enhance and secure CI/CD pipelines across multiple applications by embedding secure coding and DevSecOps best practices.
• Develop automation tools and scripts to streamline security processes, monitor key security metrics, and support operational demands.
• Stay up to date with emerging threats, industry trends, and mitigation techniques to continually improve cloud security controls.

Required Skills and Experience:

• Minimum 3 years in a DevSecOps capacity and 5+ years in cloud security or engineering roles.
• Strong expertise in AWS cloud services and associated security features; familiarity with Azure is advantageous.
• Solid understanding of networking, systems engineering, and cybersecurity within cloud environments.
• Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform and Ansible for secure provisioning and management.
• Excellent problem-solving capabilities and strong verbal and written communication skills.
• Practical experience using Wiz or similar cloud security posture management tools.

Cloud Security Engineer – Contract (Inside IR35)

Hybrid 2/3 days from the London office

We are seeking an experienced Cloud Security Engineer with a strong emphasis on AWS. The successful candidate will be responsible for designing, implementing, and maintaining secure cloud infrastructure, ensuring a robust security posture and supporting continuous delivery of our applications.

Key Responsibilities:

• Design and implement secure AWS cloud infrastructure, focusing on system architecture, Identity and Access Management (IAM), encryption, data protection, and network security.
• Collaborate with the Information Security and application teams to drive cloud security initiatives and align with the broader security strategy.
• Enhance and secure CI/CD pipelines across multiple applications by embedding secure coding and DevSecOps best practices.
• Develop automation tools and scripts to streamline security processes, monitor key security metrics, and support operational demands.
• Stay up to date with emerging threats, industry trends, and mitigation techniques to continually improve cloud security controls.

Required Skills and Experience:

• Minimum 3 years in a DevSecOps capacity and 5+ years in cloud security or engineering roles.
• Strong expertise in AWS cloud services and associated security features; familiarity with Azure is advantageous.
• Solid understanding of networking, systems engineering, and cybersecurity within cloud environments.
• Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform and Ansible for secure provisioning and management.
• Excellent problem-solving capabilities and strong verbal and written communication skills.
• Practical experience using Wiz or similar cloud security posture management tools.

Were looking for a Senior Cloud Security Engineer for our growing, prestigious client in the data sector, based in London, on a permanent basis paying up to £65,000 plus great benefits.

This role offers hybrid working with an expectation to be in the office 23 days per week .

Youll be joining a technical team focused on strengthening cloud security and ensuring compliance across Microsoft Azure envir.

WHJS1_UKTJ

Kurt Geiger | About Us

We are an inclusive, creative footwear and accessories brand powered by kindness. We want to empower our talent to be confident and true to themselves, the London way. London is our home, our heartbeat, and we draw inspiration from the energy and spirit of the city; its diversity and creativity. For over fifty years our team of in-house shoe and accessory designers have been creating authentic, distinctive designs from our London headquarters. The rainbow is our signature. It represents the good energy and love we have for our community and the many ways we collectively express our individual style.

Cloud Security Engineer (InfoSec)

We are seeking a Cloud Security Engineer (InfoSec) to join our Technology and Information security team. You’ll play a key role in designing, implementing, and supporting secure infrastructure, cloud services, and applications across the organisation. This position requires strong expertise in AWS, Microsoft cloud services (Intune, Azure, Entra), security auditing, and modern endpoint protection such as CrowdStrike.

Responsibilities

• Monitor and respond to security incidents using EDR/XDR tools such as CrowdStrike, Microsoft Defender, and SIEM platforms.
• Perform regular audits and security assessments across cloud (AWS, Azure) and SaaS platforms to identify risks and ensure compliance with internal policies and industry standards (ISO 27001, CIS, NIST).
• Manage and enforce Identity and Access Management (IAM) controls, including conditional access, MFA policies, role-based access control (RBAC), and least-privilege enforcement across Microsoft Entra and AWS IAM.
• Support incident response processes including investigation, containment, eradication, and recovery of security events.
• Conduct vulnerability scanning and remediation follow-ups using tools.
• Develop and maintain security baselines, configuration hardening, and patch compliance reporting across endpoints and cloud systems.
• Assist in third-party risk assessments and ensure vendors meet security requirements.
• Participate in change advisory boards (CAB) to review infrastructure and application changes from a security perspective.
• Support internal and external compliance audits by gathering evidence, ensuring policy alignment, and reporting findings.
• Collaborate with SOC, DevOps, and IT operations teams to integrate security automation and build secure-by-design practices.
• Support the IT helpdesk with complex application and system security issues.
• Patch and secure endpoints (Windows/macOS), and mobile devices via Microsoft Intune, Jamf, or Meraki.
• Implement and support endpoint and network-level security controls: FortiGate, Cisco Meraki, and Zero Trust Network Access (ZTNA) principles.
• Provide technical documentation, runbooks, and SOPs for security operations and system configurations.

Requirements

Skills Required

• Previous experience in a technical IT security, cloud engineering, or InfoSec-focused role.
• Proven experience with Microsoft 365 Security, Azure Entra ID, Intune, and AWS IAM/Security Services.
• Strong background in cloud security (AWS/Azure), including the shared responsibility model.
• Familiarity with compliance frameworks (ISO 27001, GDPR, SOC 2, NIST).
• Hands-on experience with EDR tools (CrowdStrike, Defender for Endpoint) and SIEM/SOAR platforms.
• Basic scripting for automation and reporting using PowerShell or Python.
• Working knowledge of network security protocols, VPNs, firewalls, and web filtering tools.
• Understanding of patch management, application control, and vulnerability remediation.

Desirable Qualifications

• Certifications such as CISSP, CISM, Security+, AWS Security Specialty, AZ-500, or MS-500 .
• Experience working in or with a Security Operations Centre (SOC) .
• Familiarity with DevSecOps , infrastructure-as-code, or cloud-native security practices.

Benefits

• Competitive basic salary
• Pension and life assurance
• Enviable discounts
• Gym Discounts
• Summer Hours - 3pm Friday finish
• Half Day, Pay Day Friday (once per month)
• RetailTrust support
• And so much more!

Our Culture  

We’re an energic fast-paced brand that embraces progress and strives for innovation. Hard work is rewarded with new opportunities at every level and kindness is celebrated in everything we do. Our summer working hours accommodate a healthy work life balance. Wellbeing is important to our working culture, which is why we nurture a friendly environment for talent to thrive in, alongside a vibrant social community.

Our Stores

The first Kurt Geiger store opened on London Bond street in 1963.  Today, our brand has global appeal and is distributed in hundreds of cities around the world. We operate over 70 stand-alone stores nationwide, including our new flagship store on London Oxford street, and in over 400 stores globally. Beyond stand-alone stores and retail pop ups, our retail partners include some of the world’s most famous department stores.

We Are One: For Love | For Diversity | For Change | For Equality | For Kindness |  For Freedom | For Unity Against Racism

We’re looking for a Senior Cloud Security Engineer for our growing, prestigious client in the data sector, based in London, on a permanent basis paying up to £65,000 plus great benefits.

This role offers hybrid working with an expectation to be in the office 2–3 days per week.

You’ll be joining a technical team focused on strengthening cloud security and ensuring compliance across Microsoft Azure environments. This role will involve hands-on security engineering, working closely with infrastructure and DevOps teams, and supporting the adoption of Microsoft’s security toolset across the organisation.

You will need proven experience with:

• p>Securing Azure environments in line with best practices - essential 

• Microsoft Defender (Cloud, Endpoint, 365) - essential 

• Sentinel - essential

• Microsoft Purview, Compliance Manager and related compliance tools 

• Entra ID (Azure AD), Conditional Access and Identity Governance

• Data Loss Prevention, sensitivity labels and insider risk management

• ISO 27001, SOC 2, GDPR and NIS2 frameworks

• PowerShell scripting and use of Microsoft Graph API

• Working across cloud, infrastructure and application teams

Certifications required:

• AZ-500

• SC-100 (or working towards)

• One or more of MS-500 / SC-400 / SC-900

The following are desired: CISSP, CISM, CCSP

Interested?

Please apply below.

Senior Cloud Security Engineer, Azure Security Engineer, Azure Security Consultant, Cloud Security Consultant, Microsoft Security, Azure Sentinel, Defender, Purview, Compliance, Entra ID, Cloud Security, DLP, Data Sector, London, Hybrid