Cloud Security Engineer CGEMJP00347361

Role purpose / summary

As an experienced Security professional, you will be utilised to drive the future security of our cloud platforms. You will play a key role in working as part of a global team reviewing and evaluating cloud services from major cloud providers, identifying potential threats, and developing mitigations.

Primary Responsibilities

• Review and identify security challenges with cloud platform services
• Design, develop and deliver security controls for cloud platforms
• Work alongside infrastructure engineers to contribute to the design and delivery of cloud services.
• Act as security SME for cloud services

Standard Technical Skills & Competencies

• Experience working in enterprise cloud environments (Azure, AWS, GCP).
• Experience building cloud infrastructure and using cloud IaC tooling (Terraform, Cloudformation, BICEP)
• Experience in threat modelling, security reviews and testing.
• Proficiency in scripting languages: PowerShell, Bash, Python and behaviour-driven design
• Strong familiarity with security standards, security controls, and cloud security tooling.
• Experience with incident, problem, and change management processes.
• Experience with CSPM/SSPM tooling and use
• Container knowledge, particularly in Kubernetes.
• Experience with Linux operating systems.
• Experience with IaC policy-as-code security tools - Terraform Sentinel, Wiz, etc.
• Strong understanding of cryptography, modern authentication and authorization mechanisms, networking, and enterprise security architectures.

Desirable

• Previous experience in the financial/regulated sector
• Bachelor's degree, or higher, in a related discipline (or equivalent experience)
• Experience with Scrum/Agile development methodologies.