Cloud Security Engineer - Kubernetes

Looking for a seasoned Cloud Security Engineer with in-depth exposure to Kubernetes to join a vibrant team in the FinTech industry. The ideal candidate will be essential in safeguarding the security, confidentiality, integrity, and availability of cloud infrastructure. This position requires the design, implementation, and maintenance of cloud security solutions that adhere to industry regulations and best practices.

Client Details

Our client is a FinTech organization based in Central London.

Description

This role requires a seasoned Cloud Security Engineer to join a vibrant team in the financial services industry. The ideal candidate will be essential in safeguarding the security, confidentiality, integrity, and availability of cloud infrastructure. This position requires the design, implementation, and maintenance of cloud security solutions that adhere to industry regulations and best practices, while ensuring the protection of sensitive financial data.

Key Responsibilities:

1. Cloud Security Strategy & Architecture:
   1. Design and implement secure cloud architectures in multi-cloud environments (e.g., Azure, Google Cloud).
   2. Develop and enforce security standards, policies, and procedures for cloud environments.
   3. Evaluate and integrate cloud security technologies, such as CASB, CSPM, CWPP, and others.
2. Security Operations:
   1. Monitor cloud infrastructure for security breaches and respond to incidents promptly.
   2. Implement and manage security tools for threat detection, vulnerability management, and encryption.
   3. Conduct regular security assessments, including penetration testing, vulnerability scanning, and cloud configuration reviews.
3. Compliance & Risk Management:
   1. Ensure compliance with industry regulations (e.g., PCI-DSS, GDPR, SOX) and internal security policies.
   2. Perform risk assessments to identify and mitigate potential security threats to cloud environments.
   3. Collaborate with audit teams to ensure the cloud environment meets all regulatory and security standards.
4. Collaboration & Stakeholder Engagement:
   1. Work closely with DevOps, IT, and application development teams to integrate security best practices into the CI/CD pipeline.
   2. Provide guidance and training on cloud security best practices to internal teams and stakeholders.
   3. Liaise with external vendors, partners, and regulators to ensure the alignment of cloud security initiatives.
5. Incident Response & Forensics:
   1. Develop and maintain incident response plans for cloud environments.
   2. Lead investigations into security incidents involving cloud infrastructure, coordinating with relevant teams for remediation.
   3. Perform forensic analysis to identify root causes of security breaches and recommend improvements.
6. Innovation & Continuous Improvement:
   1. Stay updated on the latest cloud security trends, threats, and technologies.
   2. Propose and implement innovative solutions to enhance the security posture of the organization's cloud environments.
   3. Participate in continuous improvement initiatives related to cloud security processes and technologies.

Required Experience:

1. 5+ years of experience in cloud security, preferably in the financial services industry.
2. Hands-on experience with Azure cloud platforms.
3. 5+ years proven experience with Terraform or similar IaC language.
4. 5+ years proven experience in implementing and managing cloud security controls and technologies.
5. 5+ years proven Azure security expertise and ability to deploy Azure Policies, blueprints and alike.
6. 5+ years advanced Kubernetes security knowledge and CI/CD security knowledge.

Profile

The successful Cloud Security Engineer will have exposure to the following:

Technical Skills:

1. In-depth knowledge of cloud security architecture, best practices, and frameworks (e.g., NIST, CSA, CIS).
2. Experience with security automation, orchestration, and DevSecOps practices.
3. Must have in-depth exposure to AKS Kubernetes.
4. Proficiency in scripting and programming languages (e.g., Python, PowerShell, Bash) for security automation.
5. Strong understanding of encryption technologies, identity and access management (IAM), and network security in cloud environments.
6. Familiarity with compliance frameworks applicable to the financial services industry (e.g., PCI-DSS, SOX).

Soft Skills:

1. Strong analytical and problem-solving skills.
2. Excellent communication and interpersonal skills, with the ability to convey complex security concepts to technical and non-technical audiences.
3. Ability to work independently and as part of a team in a fast-paced environment.

Preferred Qualifications:

1. Experience with cloud-native security services (e.g., Azure Security Center).
2. Knowledge of financial industry regulations and standards.
3. Experience with Infrastructure as Code (IaC) tools like Terraform or CloudFormation.
4. Prior experience in conducting or managing cloud security audits.

Job Offer

This role is offering up to £120,000 per annum for the ideal candidate, plus Pension, Bonus, and Share Options.

This role requires 1 day on-site per month based in Central London.

This is a 4-stage interview process via Teams.