This job might no longer be available.

Cloud Security Engineer

Summary

What you'll do

This is a great opportunity for an experienced Cloud Security Engineer, with strong technical skills to join a growing team and play a key role in shaping our security posture and maturity, both now and as we look to grow further in future.

Responsibilities

• Subject matter expert advising on security posture, maturity and roadmap development
• Manage security risks across multiple Global functions.
• Working knowledge of laws, compliance standards and best practises e.g. GDPR, ISO27xxx series, PCI DSS, NIST, OWASP etc
• Translating business/compliance requirements into low-level designs in line with best practise
• Design, implementation and continuous review of network security policies, processes & procedures
• Support Management and Delivery Teams in decision making and prioritisation
• Automation of manual tasks and BU intelligence sharing
• Supporting and improving Change Management and agile SSDLC processes
• Working in partnership with external suppliers and vendors to drive continuous improvement
• Incident Management response, trouble shooting and investigation
• BC/DR Planning and Testing, Red Team Exercises
• Reporting in line with OKRs/SLAs
• Troubleshoot issues efficiently while effectively communicating escalations and outcomes.
• Provide guidance and mentoring to other engineers, supporting design, implementation and troubleshooting when required

What we're looking for

Skills & Experience

Strong technology background and demonstrable working knowledge of

• Market leading security solutions (Prisma Cloud, Netskope, Qualys)
• GCP Security best practice design & config
• DevSecOps tools and automation (SonarQube, Prisma Cloud)
• CI/CD tools (Jenkins, GitHub Actions)
• API integration and authentication methods (OAuth, IAP)
• WAF rules & config (Cloudflare, Cloud Armour)
• Linux
• Docker
• DAST/SAST/IAST and SCA tools.
• Routing and tunnelling protocols
• VPN and supporting technologies
• Implementing automated security tooling as part of CI/CD
• Implementing Infrastructure as Code/Scripting (Terraform, Kubernetes, Python, Ruby)