UK Remote Job – Cloud Security Engineer at Vesta Software Group
Job Title: Cloud Security Engineer
Employer: Vesta Software Group
Job Type: Remote
Location: United Kingdom
Salary/Rate: Not Specified
UK Visa Sponsorship: Not Available
Overview
Table of Contents
This Cloud Security Engineer role focuses on protecting Azure cloud infrastructure, applications, data and AI-enabled systems from security threats and vulnerabilities. The successful candidate will automate security controls, investigate incidents, support compliance requirements and work with engineering teams to embed security into everyday operations.
Description
-
Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.
-
Review cloud architectures, configurations and proposed changes to identify security risks before deployment.
-
Automate security configurations, vulnerability detection, policy checks, evidence collection and remediation.
-
Manage secrets, encryption keys, certificates, privileged access and service accounts.
-
Monitor security alerts and investigate suspicious activities, vulnerabilities, misconfigurations and control failures.
-
Prioritise remediation based on exploitability, exposure, business impact and existing safeguards.
-
Support incident response, evidence preservation, root-cause analysis and corrective actions.
-
Maintain records of security findings, assigned owners, deadlines, exceptions and accepted risks.
-
Assess security threats associated with AI-enabled services and autonomous agents.
-
Use approved AI tools for security investigations and analysis while protecting sensitive information.
-
Collaborate with Research and Development (R&D) and Data teams to embed security into AI development, APIs, data flows and deployment processes.
-
Establish safeguards governing AI access to production systems, credentials, logs and customer information.
-
Support compliance assessments and customer assurance activities involving ISO 27001, PCI DSS, Cyber Essentials Plus and GDPR.
-
Develop security standards, operational guides and runbooks, and coach engineers on secure cloud and AI practices.
-
Report significant security risks and trends to cloud operations, compliance managers and relevant stakeholders.
Responsibilities
-
Secure and monitor cloud infrastructure, applications and deployment pipelines.
-
Conduct security reviews and identify weaknesses in cloud configurations and platform designs.
-
Develop automation for security monitoring, policy enforcement, vulnerability management and remediation.
-
Investigate security incidents and coordinate corrective actions with relevant technical teams.
-
Manage access controls, credentials, certificates and privileged accounts securely.
-
Assess AI systems and agent-based workflows for potential security vulnerabilities.
-
Support internal and external audits by maintaining technical evidence and addressing compliance gaps.
-
Document risks, remediation progress and exceptions for accountability.
-
Advise engineers on secure development practices and help integrate security into software delivery.
-
Communicate technical risks clearly to technical and non-technical stakeholders.
Requirements
-
Hands-on experience securing Azure or another major cloud platform in a production environment.
-
Practical knowledge of identity and access management, networking, Kubernetes, containers, operating systems and vulnerability management.
-
Experience with security monitoring, logging, incident response and remediation.
-
Skills in scripting, infrastructure automation, policy-as-code or security automation.
-
Understanding of secure software development, CI/CD pipelines and secrets management.
-
Ability to investigate security findings, assess their severity and coordinate effective remediation.
-
Strong documentation, analytical and problem-solving skills.
-
Ability to communicate security risks clearly to different audiences.
-
Desirable: Azure security, Kubernetes security or recognised cybersecurity certifications.
-
Desirable: Experience with ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments.
-
Desirable: Experience threat-modelling AI-enabled systems, APIs or agentic automation.
-
Strong ownership, sound judgement, attention to detail and commitment to continuous learning.
-
Collaborative approach, with a willingness to share knowledge, review work and support colleagues.
-
Practical interest in responsible AI adoption and improving security processes.
Benefits
-
Employment arrangement: Regular employment, as stated in the supplied listing.
-
Working hours: 37.5 scheduled hours per week.
-
Opportunity to work with Azure cloud security, cybersecurity automation and emerging AI technologies.
-
Exposure to security compliance frameworks and customer assurance activities.
-
Opportunities to collaborate with cloud operations, data and software engineering teams.
-
Scope to develop technical expertise in cloud security, AI risk management and security automation.
How to Apply;
Interested and qualified candidates should:
Click here to apply online for this job