Cloud Security Engineer

Cloud Security Engineer page is loaded## Cloud Security Engineerlocations: Remote
- UK Vestatime type: Full timeposted on: Posted 6 Days Agojob requisition id: R54325####

Job Description
# Cloud Security EngineerPOSITION SUMMARYThe Cloud Security Engineer protects Gladstone's cloud platforms and services through secure design, configuration, monitoring, automation and evidence-led remediation. The role works across Azure, Kubernetes, networks, identity, workloads, data and delivery pipelines, and supports the safe adoption of AI-enabled systems and operational tooling.AI-ENABLED WORKINGAI-enabled working is a core expectation of this role. The role holder will use approved AI tools and automation to improve quality, speed, insight and consistency; validate outputs before acting on them; protect customer, employee and company data; and share effective practices with colleagues. Performance will be assessed through outcomes such as quality, reliability, cycle time, risk control and knowledge transfer
- not simply the volume of AI-generated output or frequency of tool use.

KEY RESPONSIBILITIES
Cloud Security Engineering
- Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.
- Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production.
- Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation where appropriate.
- Support secrets, key, certificate, privileged-access and service-account lifecycle management.
Detection, Response and Vulnerability Management
- Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures.
- Prioritise remediation using exploitability, exposure, business impact and compensating controls rather than severity labels alone.
- Support security incident response, evidence preservation, root-cause analysis and completion of corrective actions.
- Maintain clear security findings, owners, due dates, exceptions and risk acceptance records.
AI and Application Security
- Threat model AI-enabled services and operational agents, including data leakage, prompt injection, over-permission, unsafe actions, supplier risk and inadequate human oversight.
- Use approved AI tools to support security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data.
- Work with R&D and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns.
- Define and test guardrails for AI access to production systems, credentials, logs and customer information.
Compliance and Security Culture
- Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity.
- Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working.
- Report material risks and trends clearly to the Cloud Operations Manager, Compliance Manager and relevant owners.EXPERIENCE, KNOWLEDGE AND SKILLSEssential
- Hands-on experience securing Azure or another major cloud platform in a production environment.
- Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response.
- Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation.
- Experience with scripting, policy-as-code, infrastructure automation or security automation.
- Understanding of secure development and deployment practices, including secrets and pipeline security.
- Clear documentation and communication of technical risk to different audiences.
Desirable
- Azure security, Kubernetes security or recognised cyber-security certification.
- Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments.
- Experience threat modelling AI-enabled systems, APIs or agentic automation.PERSONAL ATTRIBUTES- High ownership, sound judgment and a bias toward solving problems rather than moving them between teams.
- Curious and adaptable, with a practical commitment to continuous learning and responsible AI adoption.
- Systematic, evidence-led problem solving and attention to detail.
- Clear communication with both technical and non-technical colleagues.
- Collaborative working style and willingness to share knowledge, review work and support others.#### Business Unit:Gladstone Software#### Scheduled Weekly Hours:37.5#### Number of Openings Available:1#### Worker Type:Regular# Career Site:#### More About Jonas Software:Jonas Software is a leading provider of enterprise management software solutions, serving a wide range of vertical markets including hospitality, healthcare,