Title: Senior Cloud Security Engineer
London (Sutton), GB
Overview
We are looking for a Senior Cloud Security Engineer to join our team in our Aberdeen office, London office or on a Remote basis on a full-time permanent contract.
The Senior Cloud Security Engineer (CSE) role will be responsible for delivery of cyber security improvements across the cloud offerings at Subsea7. Reporting to the Information Security Manager as part of the IT Security team the successful candidate will bring a solid cybersecurity background and have a sound technical understanding of enterprise IT.
The Senior CSE will work alongside the IT security team, Internal IT teams and managed service providers to ensure that our cloud environment meets security best practices. This role will require a clear communicator who will be able to explain complex security challenges to a wide range of stakeholders.
As the cloud technologies continue to evolve so does the security requirements to keep them secure. The Senior CSE will help shape our cloud security strategy ensuring that our policies, tools and ways of working continue to adapt to meet these new challenges.
What will you be doing?
- Working within the IT Security team to design and deploy cloud security solutions across our IAAS, PAAS and SAAS technologies
- Working with the IT Security team to develop and maintain security policies and procedures for the cloud environment
- Conduct regular security assessments and audits to identify and mitigate risks within our cloud environment
- Support and maintain our security controls within Azure Active Directory and Microsoft 365
- Identify security risks and provide recommendations for mitigation
- Support during any production issues and incidents and participate in the problem and change management forums
- Support and maintenance of Cloud Security Tooling and Platforms
- Take part in post incident reviews and propose engineering resolutions to improve results in any future recurrence
- Assist with mentoring and cross skill training across the IT Security team and wider IT function
- Stay up to date with the latest threats and vulnerabilities in the cloud environment and make recommendations for remediation
What experience would we like you to have?
Please note, if you don’t tick all the boxes below but feel you have some of the relevant skills and experience we’re looking for, please do consider applying. We would encourage you to apply with a CV that highlights your transferable skills and experience.
- Extensive IT experience with cloud technologies (Microsoft Azure preferred)
- Experience in delivering Information Security in a modern digital workplace
- Preferred security certification (CISSP, CISM)
- Preferred azure certifications (AZ-500,SC-300)
- Experience within a Windows Server environment
- Experience within Microsoft 365 and Azure Active Directory with Microsoft Purview experience is desirable
- Scripting knowledge with PowerShell
- Understanding of the NIST cybersecurity Framework, ISO27001, GDPR
- Operates with the highest level of confidentiality
- Clear communicator who can present to both technical and non-technical audiences
- Good understanding of IT Infrastructure & applications with knowledge of industry standards and current technology trends.
#LI-AR1