Senior Information Cloud Security Engineer

Overview

As Senior Information Security Engineer you will secure cloud platforms, cloud-native services, and AI-enabled solutions, translating security requirements into scalable controls. You will lead cloud and AI security assessments, define secure architectures, and drive posture improvements across Azure, GCP, SaaS, and enterprise tech. You’ll automate controls, provide risk-based recommendations to senior stakeholders, and collaborate with cross-functional teams to embed security by design. This role offers impact at scale within a global security program.

Pay / Benefits

• hybrid or flexible working model
• family-friendly policies
• wellbeing programs
• inclusive employment policies
• global mobility and collaboration
• equal opportunity employer

Responsibilities

• Define and continuously improve security controls and reference patterns across cloud and SaaS platforms, containers, serverless workloads, VMs, storage, databases, APIs, and networking.
• Assess cloud architectures for identity, access, encryption, secrets, logging, resilience, data protection, and secure admin access.
• Lead investigations into cloud identities, privileged access, misconfigurations, and suspicious activity.
• Embed security into cloud delivery by partnering with architects, platform teams, and developers to apply guardrails.
• Own and improve cloud security posture and workload-protection processes, including onboarding, baselining, remediation tracking, and governance integration.
• Support vulnerability and exposure management for internet-facing assets and cloud workloads using threat data.
• Conduct security reviews of cloud solutions, integrations, APIs, IaC, and changes with emphasis on least privilege and secure configuration.
• Define and apply security requirements for enterprise AI, copilot/agent platforms, and AI-enabled SaaS, including data handling and logging.
• Build automation and PoC solutions using PowerShell, Python, KQL, APIs, policy-as-code, IaC, and cloud-native functions; mature concepts into governed services.
• Define telemetry, detection requirements, and maintain security standards, runbooks, and control-validation for cloud and AI services.
• Provide technical leadership, escalate complex issues, and communicate risk through KPIs, dashboards, and executive summaries.
• Stay aware of emerging cloud/AI capabilities and regulations, driving proportional improvements and managed initiatives.

Key requirements

• At least 5 years of cloud security experience in large or complex enterprises.
• Hands-on experience securing Azure and GCP.
• Strong knowledge of IAM, workload identities, privileged access, federation, and least-privilege design.
• Experience assessing architectures across compute, storage, databases, networking, containers, serverless, APIs, key management, and logging.
• Experience with cloud security posture management, workload protection, vulnerability management, and risk-based remediation.
• Experience defining security controls for generative AI and AI-enabled SaaS solutions.
• Understanding of AI risk areas (prompt injection, data leakage, excessive permissions, third-party model risk) and governance.
• Ability to automate security processes with PowerShell, Python, KQL, APIs, IaC/policy-as-code, cloud-native functions.
• Experience reviewing cloud designs for authentication, authorization, encryption, data protection, and monitoring.
• Ability to troubleshoot across cloud, identity, app, API, network, data, and security-monitoring layers.
• Strong communication to translate technical issues into business risk and provide architecture guidance.
• Working knowledge of ISO 27001, NIST, CIS, and AI risk-management guidance.
• Ability to manage initiatives in a global, matrixed environment.

• Strong stakeholder-management
• Clear, concise communication
• Ability to challenge constructively
• Azure
• GCP
• Cloud identity and access management

…