Cloud Security Engineer

Job not on LinkedIn

🔥 4 hours ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Vesta Software Group

WebsiteLinkedInAll Job Openings

201 - 500 employees

🏗️ Construction

🍽️ Food & Beverage

🏭 Manufacturing

Construction • Food & Beverage • Manufacturing

Vesta Software Group is a global organization specializing in the acquisition and long-term growth of vertical market software companies. Unlike traditional acquirers, Vesta operates on a buy-and-hold strategy, maintaining the independence of the companies they acquire and investing in their sustainable growth. Vesta prides itself on never selling a business, instead prioritizing the autonomy of its acquired companies and leveraging a network of resources to accelerate growth. With more than 30 acquisitions and a presence in over 9 countries, Vesta supports its portfolio companies with best practices and capital while fostering a productive and positive workplace culture, demonstrated by its Great Place To Work® certification.

📋 Description

• Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines • Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production • Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation • Support secrets, key, certificate, privileged-access and service-account lifecycle management • Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures • Prioritise remediation using exploitability, exposure, business impact and compensating controls • Support security incident response, evidence preservation, root-cause analysis and corrective actions • Maintain security findings, owners, due dates, exceptions and risk acceptance records • Threat model AI-enabled services and operational agents • Use approved AI tools for security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data • Work with R&D and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns • Define and test guardrails for AI access to production systems, credentials, logs and customer information • Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity • Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working • Report material risks and trends to the Cloud Operations Manager, Compliance Manager and relevant owners

🎯 Requirements

• Hands-on experience securing Azure or another major cloud platform in a production environment • Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response • Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation • Experience with scripting, policy-as-code, infrastructure automation or security automation • Understanding of secure development and deployment practices, including secrets and pipeline security • Clear documentation and communication of technical risk to different audiences • Azure security, Kubernetes security or recognised cyber-security certification (desirable) • Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments (desirable) • Experience threat modelling AI-enabled systems, APIs or agentic automation (desirable) • High ownership, sound judgment and a bias toward solving problems rather than moving them between teams • Curious and adaptable, with a practical commitment to continuous learning and responsible AI adoption • Systematic, evidence-led problem solving and attention to detail • Clear communication with both technical and non-technical colleagues • Collaborative working style and willingness to share knowledge, review work and support others

🏖️ Benefits

• Regular Career Site employment • 37.5 scheduled weekly hours