Cloud Security Engineer

Stack

Responsibilities

• ▹Define and implement the cloud security framework in collaboration with IT Systems, SOC leadership, and GRC
• ▹Recommend and implement best-practice controls for cloud security and governance
• ▹Implement automated security tooling to validate security requirements and identify issues
• ▹Define threat detection and incident response processes and playbooks for cloud environments
• ▹Collaborate with the SOC to operationalize detection rules and incident handling
• ▹Support GRC in meeting compliance requirements for ISO27001, NCSC Cloud Security Principles, and SOC2
• ▹Review outputs from security tools and filter/prioritize them into security stories delivery teams can act on
• ▹Guide junior engineers and developers to adopt secure practices
• ▹Upskill and train the wider security team on cloud security topics and tooling
• ▹Provide input into IAM strategy and policy: RBAC, Conditional Access, MFA, least privilege

Requirements

• ▹Previous experience in cloud security engineering or a related role
• ▹Working knowledge of industry cloud security frameworks: CSA STAR, NCSC Cloud Security Principles
• ▹Automation and scripting experience: Python, PowerShell, Bash
• ▹Proficiency with Azure security services: Defender for Cloud, Entra ID, Sentinel
• ▹Proficiency with AWS security services: Security Hub, GuardDuty, IAM, Config, CloudTrail, CloudWatch
• ▹Working knowledge of cloud incident response processes
• ▹Strong understanding of security best practices in multi-cloud environments

Nice to have

• ▹Familiarity with Terraform (Infrastructure as Code)
• ▹Knowledge of cloud network security concepts: firewalls, NSGs, VPCs, private endpoints
• ▹Exposure to compliance frameworks: ISO27001, SOC2, NCSC Cloud Security Principles
• ▹Security certifications such as AZ-500 or SC-100

Soft skills

About the company

Kainos is a digital services and Workday solutions company built on a people-first culture, transforming digital services for millions of users.