Cloud Security Engineer

Role: Senior Cloud Security Engineer

Location: Sheffield, UK (Hybrid -3 days a week WFO)

Job Type: Contract & Permanent

Job Details

The ideal candidate for this role will have the below experience and qualifications

Handson experience with CNAPP, CSPM platforms ideally Wiz or equivalent such as Prisma Cloud Orca, CrowdStrike.

Strong understanding of GCP security and associated best practices including IAM logging monitoring network security controls and container Kubernetes security concepts

Experience assessing cloud security findings in context determining material risk impact and appropriate remediation options

Experience working with DevSecOps CICD teams and embedding security controls into delivery and operational workflows

Strong stakeholder management and collaboration skills across engineering operations and cybersecurity teams

Experience working in a regulated environment with an understanding of auditability and control evidence

Essential Skills

• Demonstrable experience improving cloud security posture on GCP using CNAPP,CSPM tooling and governance processes
• Ability to triage and tune security findings drive remediation and report progress using meaningful metrics
• Working knowledge of cloud security standards control frameworks and operational risk considerations eg logging monitoring access control resilience
• Strong written and verbal communication skills with the ability to communicate complex security topics clearly to technical and nontechnical stakeholders
• Experience working within an Agile environment

Desirable Skills

• GCP certifications ideally security focused eg Professional Cloud Security Engineer
• Experience supporting CNAPP across multi-cloud environments AWS, Azure in addition to GCP
• Experience integrating CNAPP outputs into enterprise reporting and governance processes

Mandatory Skills

• Agile (Value-Driven Delivery)
• Application Security (application security framework/ threat modelling/ Secure SDLC/ DevSecOps/Application Security Architecture Review)
• Network Security Architecture