Senior Cloud Security Engineer

Job not on LinkedIn

🔥 8 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Psychiatry UK

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

🏥 Healthcare

👥 B2C

Healthcare • B2C

Psychiatry UK is the UK’s leading provider of digital psychiatry services, offering online assessment, diagnosis and treatment for a range of mental health conditions. Using secure video links, it connects patients with specialist doctors and provides consultations, assessments and ongoing psychological support with an emphasis on accessibility and convenience. Psychiatry UK operates as a fully remote business, works with many self-employed clinicians, and focuses on pathways including ADHD and ASD while promoting diversity, safety and clinical quality.

📋 Description

• Own and evolve security guardrails, reference architectures and technical standards across AWS, Azure and Microsoft 365 • Design and assure security controls across identity, networking, compute, containers, storage, databases, encryption, secrets management, backup and recovery • Review and challenge cloud designs, threat models, Architecture Decision Records and significant changes • Lead remediation of control gaps • Support AWS landing zones, account boundaries, access controls, permission models and break-glass arrangements • Engineer and assure IAM, KMS, CloudTrail, Config, GuardDuty, Inspector, Security Hub, CloudWatch and AWS Backup capabilities • Drive security improvements across EC2, RDS, S3, ECS/Fargate, Lambda, ECR and internet-facing services • Improve security across Microsoft 365 E5, Azure, Defender, Intune, Azure Virtual Desktop, Purview and SIEM capabilities • Embed Secure-by-Design principles across projects through the Security and Technology Assurance Framework • Integrate security into engineering workflows, CI/CD pipelines and cloud deployment patterns • Implement and improve SAST, SCA, secrets scanning, infrastructure-as-code, container and application security testing • Partner with engineering teams on threat modelling, vulnerability remediation, dependency management and release assurance • Ensure complete, protected and effectively monitored security telemetry • Lead technical assessment and risk-based remediation of complex vulnerabilities and misconfigurations • Respond to cloud security incidents, supporting containment, investigation, recovery and lessons learned • Work with the 24/7 SOC, digital forensics and incident response partners • Translate ISO/IEC 27001, Cyber Essentials Plus, DSPT, NCSC frameworks and UK GDPR requirements into technical controls and evidence • Maintain security engineering evidence for audits, control testing, risk treatment and continuous improvement • Provide security assurance for new systems, suppliers and material changes • Contribute to security standards, hardening guidance, runbooks, architecture documentation and control reporting • Provide technical leadership, coaching and constructive challenge across Cyber, Platform, Engineering and Digital Workplace teams • Lead technical investigations and security improvement initiatives • Communicate recommendations to technical and non-technical stakeholders • Manage priorities independently, escalate risks early and maintain clear technical and assurance documentation • Report to the Director of Cyber Security and Resilience

🎯 Requirements

• Applicants must reside in the UK • Substantial hands-on experience in cloud or platform security, including designing, implementing and operating production security controls • Strong AWS security engineering experience, including multi-account governance, IAM, logging, threat detection, vulnerability management, encryption, network controls and workload hardening • Experience securing cloud-native applications, APIs, containers and CI/CD pipelines • Strong understanding of DevSecOps and shared-responsibility models • Experience building or reviewing infrastructure as code and security automation using Terraform, CloudFormation, Python, PowerShell, AWS CLI or equivalent • Experience of security monitoring, investigation and incident response using SIEM, cloud-native telemetry and relevant query languages • Strong knowledge of network security, encryption, key and secrets management, resilience, vulnerability management and secure configuration • Experience translating security risk, policy and compliance requirements into proportionate technical controls and auditable evidence • Experience providing technical leadership, coaching or developing capability within security or engineering teams • Strong understanding of security governance, risk management and security controls within complex technology environments • Desirable: Practical experience of Microsoft Entra ID and Microsoft cloud security, including Conditional Access, MFA, PIM, RBAC and Defender capabilities • Desirable: Experience within healthcare, regulated digital services or environments processing sensitive or special category data • Desirable: Knowledge of ISO/IEC 27001, Cyber Essentials Plus, DSPT, NCSC CAF, NCSC Cloud Security Principles, NIST CSF and UK GDPR • Desirable: Experience with Datadog, Cloudflare, Rapid7, GitHub security capabilities, CSPM/CNAPP platforms or managed SOC services • Desirable: Experience of penetration testing, red teaming, threat modelling, MITRE ATT&CK mapping or cloud forensic investigation • Desirable: Understanding of service management, change control, supplier assurance, business continuity and disaster recovery • Degree or equivalent practical experience in cyber security, computer science, cloud engineering or a related discipline • Relevant professional certifications are welcomed as supporting evidence but are not a substitute for current, hands-on technical capability • Strong communication, influencing, analytical and collaboration skills • Ability to work autonomously, manage competing priorities and remain calm during incidents • Integrity, sound judgement, accountability and commitment to knowledge sharing and continuous improvement

🏖️ Benefits

• £1000 working from home allowance • Health Cash Plan • Well Hub Subscription • Employee Assistance Programme • Annual Volunteering Day • Enhanced Sickness and Family Leave pay • Length of Service Bonus • Work from Home allowance • Pension options • Flexible remote full-time role • Reasonable adjustments during recruitment, including additional time, assistive technology, or alternative formats