Senior Cloud Security Engineer
3 days ago Be among the first 25 applicants
Get AI-powered advice on this job and more exclusive features.
hackajob is collaborating with Tesco to connect them with exceptional tech professionals for this role.
Azure Cloud Security Engineer III
About The Role
Exciting Opportunity at Tesco Technology!
Join as an Azure Cloud Security Engineer within the infrastructure security architecture team. Your core purpose will be acting as the go-to subject matter expert between the wider Technology Security area and Cloud Platform Engineering team for the large Microsoft Azure estate within Tesco, as well as supporting security teams within Technology Security in helping them achieve their security goals, using your knowledge and experience of Azure.
We’re on the lookout for someone who already has experience working with Azure at an enterprise or equivalent scale engineering led organisation, who understands the nuances of dealing with a large array of engineering and infrastructure stakeholders, and has been responsible for designing and implementing security initiatives and supporting colleagues across the business, with the ability to understand, translate and advise on Azure concepts to people who may lack Azure expertise.
You will be responsible for
Responsibilities
This is a contract position and does not require people management. Your responsibilities will be as a specialist within the Azure and Azure security domain and will cover:
* Managing Azure Policy direction and supporting exemptions
* Ensure design, review and delivery of upcoming Azure Policies and assess viability of upcoming policies / approach.
* Assess suitability and impact of Azure policy exemptions at the team, environment, or global scale and create exemptions at the appropriate scope. Responsible for providing approvals, upon completion of the suitability assessment.
* Act as an SME advisor. Assessing impact of upcoming Azure security-related change initiatives and ensuring the compliance with security policies and standards
* Delivered through proposed/implemented centralised controls, or through reducing the friction of consuming organisationally aligned infrastructure.
o Working with and supporting key functions of the business to provide security architecture advice and review control appropriateness
o Working with senior stakeholders with the Cloud Platform Engineering and Infrastructure Architect teams, supporting them with security deliverables as well as assessing upcoming changes with a security lens.
o Supporting and providing advice on complex and custom implementations, which other security or engineering teams are building.
* Supporting in security incident response.
o Be available to support response efforts and provide support to the Security Operations teams in situations where incidents occur within the Azure environment and specialist expertise is required as and when needed.
* Monitoring & reporting of security compliance.
o Defining the measures and metrics to demonstrate compliance of implementation and the environment against the documented Tesco security standards and best practices.
o Collate and provide reporting of the policies compliance to appropriate stakeholders as and when requested,
* Collaboration and Documentation:
o Working with the wider CPE team to document centralised constructs, as well as any modules or other artefacts produced; creating documentation that can be understood by a variety of audiences.
o Working as part of a community of architects, engineers and individual contributors to input into standards and cookbooks that can be used by
You will need
You’ll need to demonstrate experience with,
* Knowledge of Azure best practices and working with teams
* Demonstrable experience with Azure CLI, PowerShell or Azure Graph REST API required.
* Minimum 5 years' experience in a senior Azure architecture or engineer role.
* Ability to operate independently with limited support and without additional training required, able to communicate and work with experienced infrastructure, security and software development engineers.
Azure / Azure Security Knowledge
* Comprehensive knowledge of Microsoft Azure. Knowledge of other cloud platforms may be helpful, especially in relation to mapping capabilities and services between public cloud providers, but not essential.
* Experience identifying and remediating cloud related risks with Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) solutions
* Familiarity with Role Based Access Control, policy, and other common governance constructs.
* Familiarity with Entra ID, specifically security best practices, hardening and conditional access.
* Familiarity with Azure Policy, specifically exemptions, initiatives and policy definitions and assignments as well as compliance reporting.
* Familiarity with Log Analytic Workspace, specifically logging DCR, Diagnostic setting and KQL queries.
* Microsoft Defender for Cloud best practices, ability to assess and review new Defender capabilities and understand impact of enabling (or not enabling) specific plans.
* Knowledge of automating enablement of Microsoft Defender for Cloud
* Designing secure solutions in public or private clouds.
* Designing and supporting implementation of new security controls
* Conducting risk assessments or threat modelling exercises on cloud systems.
* Understand compliance frameworks such as Microsoft Cloud Security Benchmark (MCSB), NIST, CIS, ISO 27001, PCI-DSS.
Exposure / Understanding Of Containerisation Specifically Hardening
* Covering Kubernetes and Docker, with a focus on security best practices for ACR, AKS, Azure Key Vault, Azure Storage, Container Apps and Container Instances.
* Familiarity and exposure with Sentinel (SIEM), specifically reviewing alerts and fine-tuning connectors related Azure Services focusing on cyber threat activities.
Desired
CI/CD Expertise
* Working within a similar DevOps or Cloud Engineering role, with an understanding of common tooling.
* Working understanding of GitHub, GitHub Actions and Azure DevOps preferable.
* Working understanding of Jenkins.
* Working understanding of ArgoCD.
Proficiency With
* Bash, Terraform, ARM or Bicep.
Personal
Effective Documentation And Communication Abilities
* Proficient in articulating problems and solutions clearly, catering to stakeholders with varying levels of seniority and understanding.
Building Strong Relationships
* Collaborative work with diverse colleagues to drive the team's primary objectives forward.
Tech Enthusiast At The Forefront
* Demonstrates a passion for technology, staying abreast of the latest advancements.
Flexible Yet Persistent
* Advocates for customer-centric approaches while maintaining a pragmatic outlook on feasibility.
Exceptional Delivery Skills
* Demonstrates a strong ability to deliver results effectively.
Proactive, Independent, And Resilient
* Identifies both value propositions and deficiencies, taking ownership of issues and ensuring resolution. Open to constructive challenges.
Seniority level
* Seniority level
Mid-Senior level
Employment type
* Employment type
Full-time
Job function
* Job function
Information Technology
* Industries
Software Development
Referrals increase your chances of interviewing at hackajob by 2x
Sign in to set job alerts for “Senior Security Engineer” roles.
Senior Information Security Engineer – Telecoms - Up to £100,000 Starting base + Bonus
London, England, United Kingdom 1 month ago
Senior Security Engineer - Automation - £850 per day
City Of London, England, United Kingdom £110,000.00-£130,000.00 5 days ago
Sr. Security Engineer, AppSec - Amazon Stores Security
London, England, United Kingdom 1 day ago
Security Architect: Contract £900 p/d (Investment Banking)
Security Operations Analyst – Detection Engineering & Threat Hunting, Global SOC
London, England, United Kingdom 1 week ago
Senior Security Engineer - Security Technology Delivery
Greater London, England, United Kingdom 1 week ago
Network and Infra Endpoint Security Architect - London
London, England, United Kingdom 1 week ago
Greater London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 1 week ago
London, England, United Kingdom 2 months ago
Manager – Principal Security Architect: Secure Design (IC)
London, England, United Kingdom 2 days ago
London, England, United Kingdom 1 week ago
Technical Architect (DV Security Clearance)
London, England, United Kingdom 4 hours ago
London, England, United Kingdom 4 hours ago
London, England, United Kingdom 4 hours ago
London, England, United Kingdom 1 week ago
Technical Architect (DV Security Clearance)
London, England, United Kingdom 1 week ago
London, England, United Kingdom 3 days ago
Security Design Engineer / Consultant - Property and Buildings
London, England, United Kingdom 2 months ago
Security Cleared Business Analyst - SharePoint Specialist - London, remote. Start date ASAP.
Security Design Engineer / Consultant - Property and Buildings
London, England, United Kingdom 1 week ago
London, England, United Kingdom 3 days ago
London, England, United Kingdom 3 weeks ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr