Associate Cloud Security Engineer

We're on a mission to be a Force For Good, through our People, Products and Purpose s extends to our People. We're fiercely passionate, love working at pace, thrive in ambiguity, live, and breathe outside of the box, and above all are good humans. We're determined to make a positive difference in the world, whether through our solutions which help the top companies, governments and agencies find the truth and combat illegal activities, or through our people who care about contributing and giving back both within, and outside, of Nuix.

We are a Force For Good. We're selective about who comes on board, and you should be too. But if the above sounds like a match, get in touch today and get ready for the possibility of starting a once-in-a-career journey.

Role Overview We seek a motivated Cloud Security Engineer at a junior to mid-level to help implement and manage robust security controls for our cloud-based platforms. The ideal candidate will have a growing background in cybersecurity engineering coupled with cloud practices, and a strong appetite to learn. As a Cloud Security Engineer, you will play an important role in safeguarding our business cloud environments against potential threats and vulnerabilities.

Working alongside senior engineers and the broader technology team, you will help identify vulnerabilities, develop solutions, and deploy effective controls to ensure our data and systems' confidentiality, integrity, and availability. This is a hands-on growth role that requires solid technical foundations and a genuine interest in information security best practices.

Location This position will be based in either our Frankfurt (Germany) or London (United Kingdom) office. The candidate is required to attend the office a minimum of 3 days per week but may voluntarily elect to work either remotely or from the office for the remaining days of the week.

Key Responsibilities Support the design and implementation of security controls for cloud-based platforms, helping ensure compliance with industry standards and regulations such as ISO 27001, FedRAMP, NIST, IRAP, and SOC 2.Assist with technical risk assessments of cloud infrastructure and applications, helping identify potential security gaps and recommending countermeasures.

Assist with the development and maintenance of cyber security technical controls and operations, standards, and procedures for cloud deployments in collaboration with cross-functional teams.

Support technical third-party security audits and assessments.

Help identify and assess vulnerabilities, risks, and cyber security threats and their impact on Nuix's platforms and applications.

Help implement and configure security controls across various cloud services, such as AWS and Azure.

Participate in incident response activities under guidance, including supporting investigations of security breaches and helping implement corrective actions to prevent recurrence. Monitor and analyse security logs, alerts, and events to help identify and respond to security incidents and threats.

Collaborate with development and operations teams to help integrate security into the software development lifecycle (SDLC) and Dev Ops processes.

Help manage and maintain security infrastructure, including vulnerability scan tools, intrusion detection and prevention systems, anti-malware solutions, and other security platforms.

Skills, Knowledge and Expertise Tertiary qualification in Computer Science or related field, or relevant experience.

Up to 3 years of experience in cybersecurity or IT roles, with some exposure to cloud security (including internships, graduate programs or relevant project work). Some experience working as an IT Security Engineer or in a similar role, with a focus on information security, is desirable.

Foundational knowledge of network and system security principles, practices, protocols, and technologies.

Hands-on exposure to cloud platforms such as AWS, O365 and Azure.

Working knowledge of security technologies and protocols, such as Vulnerability tools, Data protection, encryption, IAM, endpoint detection, and event/incident management.

Familiarity with industry security standards and…