Cloud Security Engineer

Vesta Software Group

. Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines .

Posted 10/28/2026full-timeRemote • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing and maintaining security controls across Azure and other cloud platforms, with a strong focus on vulnerability management, incident response, and secure development practices. Proficient in automating security processes and communicating technical risks effectively to diverse audiences.

Highest-signal resume keywords

Azure SecurityKubernetes SecurityVulnerability ManagementIncident ResponseSecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityIdentity And Access ManagementNetworkingScriptingPolicy-As-CodeInfrastructure AutomationSecure Development PracticesThreat ModellingEvidence CollectionRemediation Coordination

Soft Skills

Clear CommunicationCollaborative Working StyleProblem SolvingAttention To DetailContinuous Learning

Tools & Technologies

AzureKubernetesCI/CD PipelinesAI ToolsLogging SystemsSecurity Controls

Certifications & Qualifications

ISO 27001PCI DSSCyber Essentials Plus

Industry Keywords

Regulated SaaS EnvironmentsCybersecurityRisk ManagementData ProtectionCompliance

Tech Stack

Tools & technologies

AzureCloudKubernetes

About the role

Key responsibilities & impact

Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines
Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production
Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation
Support secrets, key, certificate, privileged-access and service-account lifecycle management
Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures
Prioritise remediation using exploitability, exposure, business impact and compensating controls
Support security incident response, evidence preservation, root-cause analysis and corrective actions
Maintain security findings, owners, due dates, exceptions and risk acceptance records
Threat model AI-enabled services and operational agents
Use approved AI tools for security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data
Work with R&D and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns
Define and test guardrails for AI access to production systems, credentials, logs and customer information
Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity
Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working
Report material risks and trends to the Cloud Operations Manager, Compliance Manager and relevant owners

Requirements

What you’ll need

Hands-on experience securing Azure or another major cloud platform in a production environment
Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response
Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation
Experience with scripting, policy-as-code, infrastructure automation or security automation
Understanding of secure development and deployment practices, including secrets and pipeline security
Clear documentation and communication of technical risk to different audiences
Azure security, Kubernetes security or recognised cyber-security certification (desirable)
Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments (desirable)
Experience threat modelling AI-enabled systems, APIs or agentic automation (desirable)
High ownership, sound judgment and a bias toward solving problems rather than moving them between teams
Curious and adaptable, with a practical commitment to continuous learning and responsible AI adoption
Systematic, evidence-led problem solving and attention to detail
Clear communication with both technical and non-technical colleagues
Collaborative working style and willingness to share knowledge, review work and support others

Benefits

Comp & perks

Regular Career Site employment
37.5 scheduled weekly hours