Cloud Security Engineer

Description

The company is a digital insurance provider with plans to grow into the largest and best insurer in the UK market.

It has put significant recent investment into its data and technology, and the CIO team drives innovation and keeps the technology infrastructure aligned with those goals.

The company insures nearly four million customers and sees further growth ahead.

The team looks for people who are eager to make a difference, and you should apply even if you meet only some of the criteria and are not 100% sure you fit.

Responsibilities

• Evaluate new security technologies and cloud services through engineering work and security analysis, decide whether to pursue them, and implement them where needed, with a focus on cloud-first and cloud-native options.
• Build cloud security solutions using Security as Code principles, cloud automation tooling and industry best practices.
• Work closely with Security Architects to define and own the cloud security strategy and keep the environment continuously updated and secure.
• Set cloud security best practices and build and assess cloud-native services that give developers necessary guardrails.
• Check that cloud solutions meet published enterprise security standards, are properly governed and are delivered according to agreed guidelines.
• Work in agile teams with engineers across disciplines and strategic partners to release enterprise-class cloud services.

Requirements

• Relevant certifications, such as Azure Security Engineer, CCSP, CISSP or CCSK, are highly desirable.
• Proven experience designing, implementing and securing cloud environments, with a strong focus on Microsoft Azure services.
• Strong understanding of regulatory compliance requirements such as GDPR, ISO 27001 and NIST, and experience implementing controls to meet them.
• In-depth knowledge of cloud security best practices, network security, identity and access management, encryption and secure coding.
• Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture.
• Familiarity with DevSecOps methods and tools to build security into the development process.
• Proficiency with Microsoft Defender assessment tools, vulnerability scanning tools and SIEM platforms.
• Strong problem-solving skills and the ability to analyse complex security issues and develop effective solutions.
• Strong communication and collaboration skills and the ability to work effectively in cross-functional teams.
• In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and KQL.
• Familiarity with scripting and automation using Microsoft ARM, BICEP, PowerShell and Python.
• A track record of designing, building and deploying scalable, secure and highly available security infrastructure on Azure.
• Strong ability to use data and advanced analytics to inform decisions and keep improving security solutions.
• Expertise with Azure DevOps to support efficient, collaborative development, including building security solutions and code updates.

Conditions

Flexible hybrid working is offered; discuss days in the office and at home with your recruiter.

The salary is based on experience, with an annual pay review each year, plus a car allowance.

The company is unable to progress candidates who require sponsorship at this time.

Applicants go through a thorough referencing process, including credit and criminal record checks.

The company is an equal opportunities employer and will make reasonable adjustments during recruitment if you ask.

Benefits

• Eligibility for the annual 4Cs performance bonus, usually paid in March, based on company performance against business goals and your personal performance.
• Life assurance at 4x your salary and income protection, both at no extra cost.
• Pension contribution match of up to 10%.
• A healthcare cash plan that lets you claim against everyday health costs.
• An award-winning package with discounts and cashback at everyday retailers and on the company's products, fee-free independent mortgage advice and free financial wellbeing support.
• Mental wellbeing support including the Thrive app, a 24/7 employee assistance programme, in-house mental health first aiders, support groups and a dedicated team.
• 27 days annual leave plus bank holidays, with the option to buy or sell one contracted week.
• Private healthcare, dental plans, discounted health assessments, cycle to work and tech schemes, discounted and free onsite facilities, and social events through the year.
• Most benefits start on day one; some optional benefits, which involve a 12-month payment schedule, become available after probation.
• Training, development and recognition, with room to share your ideas and put them into practice.