Shape the Future of Cloud Security at Tesco Mobile
Tesco Mobile is the UK’s largest virtual mobile network — powered by O2 and backed by the strength of Tesco. We’re known for doing things differently: award‑winning customer satisfaction, a collaborative culture, and innovative digital experiences for over five million customers.
As a Cloud Security Engineer within the Run & Operate Chapter, you’ll join our DevSecOps Squad, working alongside DevOps engineers, platform specialists, and the Cyber Security Team. Your mission: to secure and optimise our cloud platforms across Azure and AWS, embedding robust security practices into everything we build and operate.
This is a hands‑on role where you’ll define cloud security standards, drive improvements, validate infrastructure changes, and strengthen our detection and response capabilities. Your work will directly influence how we protect our services, customers, and engineering systems.
You will play a key role in securing and maturing Tesco Mobile’s cloud environments (Azure and AWS):
* Define, maintain, and evolve cloud infrastructure security standards across AWS and Azure
* Act as a subject‑matter expert on cloud and infrastructure security
* Lead and deliver cloud security improvement initiatives and posture management work
Operational Cloud Security
* Use services like Azure Security Center/Security Hub and AWS Security Hub to monitor and enhance posture
* Identify threats, risks, and misconfigurations — and implement effective mitigation strategies
* Validate infrastructure changes to ensure they meet security and compliance requirements
Collaboration & Strategy
* Work closely with the Cyber Security Team to align on strategy, controls, and company‑wide initiatives
* Communicate risk and security improvements in a clear, business‑focused way
* Support containerised environments and cloud‑native workloads where relevant
* Proven experience in cloud security operations with either Azure or AWS (ideally both)
* Hands‑on experience with cloud security monitoring and posture management tools
o e.g., Azure Security Center, Azure Defender, AWS Security Hub
* Strong understanding of cloud governance, threat identification, and risk mitigation
* Experience integrating security controls into CI/CD pipelines
* Infrastructure as Code expertise (Terraform preferred)
* Logging/SIEM experience (e.g., Splunk, Sentinel, CloudWatch Logs)
* Automation skills using PowerShell, Azure CLI, AWS CLI, and/or Python
* Understanding of SAST, secure coding, and DevSecOps practices
* Collaborative mindset and eagerness to learn
Nice to have
* GitHub & GitHub Actions
* Experience with both AWS and Azure
* Exposure to Docker, Kubernetes, or cloud container security
* Experience creating dashboards, log ingestion or data streams in Splunk
#LI-AF2
#LI-Hybrid
A 50‑50 joint venture between Tesco and VMO2 that was established back in 2003, Tesco Mobile has gone from strength to strength as we’ve launched into new services and markets. With more than 5 million customers, we’re the largest mobile virtual network operator in the UK. We’re proud to have an inclusive culture that’s uniquely Tesco Mobile, with a strong sense of community, plus all the benefits of working for one of the shareholders.
We care for human connection and we keep our customers at the heart of everything we do, which is why we’ve embraced the Agile way of working. Agile is more than just a methodology – it’s a liberating journey that puts customers and purpose first. It empowers us to self‑organise, collaborate, co‑create and rapidly inspect and adapt everything we do – allowing us to respond at pace to our customers’ needs. It encourages variety of thought and enables us to thrive, both individually and collectively.
We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We're committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities.We’re proud to have been accredited Disability Confident Leader and we’re committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here.
We’re a big business and we can offer a range of diverse full‑time & part‑time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern -combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate. If you are applying internally, please speak to the Hiring Manager about how this can work for you - Everyone is welcome at Tesco.
#J-18808-Ljbffr