Cloud Security Engineer at Vesta Software Group

Job Title:

Cloud Security Engineer

Employer:

Vesta Software Group
Job Type: Remote

Location:

United Kingdom
Salary/Rate:
Not Specified
UK Visa Sponsorship:
Not Available

This Cloud Security Engineer role focuses on protecting Azure cloud infrastructure, applications, data and AI-enabled systems from security threats and vulnerabilities. The successful candidate will automate security controls, investigate incidents, support compliance requirements and work with engineering teams to embed security into everyday operations.

Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.

Review cloud architectures, configurations and proposed changes to identify security risks before deployment.

Automate security configurations, vulnerability detection, policy checks, evidence collection and remediation.

Manage secrets, encryption keys, certificates, privileged access and service accounts.

Monitor security alerts and investigate suspicious activities, vulnerabilities, misconfigurations and control failures.

Prioritise remediation based on exploitability, exposure, business impact and existing safeguards.

Support incident response, evidence preservation, root-cause analysis and corrective actions.

Maintain records of security findings, assigned owners, deadlines, exceptions and accepted risks.

Assess security threats associated with AI-enabled services and autonomous agents.

Use approved AI tools for security investigations and analysis while protecting sensitive information.

Collaborate with Research and Development (R&D) and Data teams to embed security into AI development, APIs, data flows and deployment processes.

Establish safeguards governing AI access to production systems, credentials, logs and customer information.

Support compliance assessments and customer assurance activities involving ISO 27001, PCI DSS, Cyber Essentials Plus and GDPR.

Develop security standards, operational guides and runbooks, and coach engineers on secure cloud and AI practices.

Report significant security risks and trends to cloud operations, compliance managers and relevant stakeholders.

Secure and monitor cloud infrastructure, applications and deployment pipelines.

Conduct security reviews and identify weaknesses in cloud configurations and platform designs.

Develop automation for security monitoring, policy enforcement, vulnerability management and remediation.

Investigate security incidents and coordinate corrective actions with relevant technical teams.

Manage access controls, credentials, certificates and privileged accounts securely.

Assess AI systems and agent-based workflows for potential security vulnerabilities.

Support internal and external audits by maintaining technical evidence and addressing compliance gaps.

Document risks, remediation progress and exceptions for accountability.

Advise engineers on secure development practices and help integrate security into software delivery.

Communicate technical risks clearly to technical and non-technical stakeholders.

Hands-on experience securing Azure or another major cloud platform in a production environment.

Practical knowledge of identity and access management, networking, Kubernetes, containers, operating systems and vulnerability management.

Experience with security monitoring, logging, incident response and remediation.

Skills in scripting, infrastructure automation, policy-as-code or security automation.

Understanding of secure software development, CI/CD pipelines and secrets management.

Ability to investigate security findings, assess their severity and coordinate effective remediation.

Strong documentation, analytical and…