Назад
Company hidden
обновлено 3 дня назад

Cloud Security Engineer (AI)

Формат работы
remote (только United_kingdom)
Тип работы
fulltime
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cloud Security Engineer (AI): Protecting Gladstone's Azure cloud platforms and services through secure design, monitoring, automation and evidence-led remediation with an accent on Kubernetes, identity, vulnerabilities, incident response and AI-enabled systems. Focus on threat modelling AI services, defining production access guardrails, automating policy and remediation, and supporting compliance evidence for ISO 27001, PCI DSS, Cyber Essentials Plus and GDPR.

Location: Remote - UK Vesta

Company

Gladstone Software is a business unit of Jonas Software, a global provider of enterprise management software serving more than 60,000 customers across over 30 countries through more than 65 brands.

What you will do

  • Implement and maintain security controls across Azure, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.
  • Review cloud and platform designs, configurations and changes, and automate secure configuration, vulnerability detection, policy checks, evidence collection and remediation.
  • Manage and investigate security signals, vulnerabilities, misconfigurations and control failures; support incident response, evidence preservation, root-cause analysis and corrective actions.
  • Threat model AI-enabled services and operational agents, including data leakage, prompt injection, excessive permissions, unsafe actions, supplier risk and insufficient human oversight.
  • Embed secure-by-design controls into AI development, data flows, APIs and deployment patterns, including guardrails for production access to systems, credentials, logs and customer information.
  • Provide evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activities; create standards and runbooks and coach engineers.

Requirements

  • Hands-on experience securing Azure or another major cloud platform in a production environment.
  • Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response.
  • Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation.
  • Experience with scripting, policy-as-code, infrastructure automation or security automation.
  • Understanding of secure development and deployment practices, including secrets and pipeline security.
  • Ability to document and communicate technical risk clearly to technical and non-technical audiences.
  • High ownership, sound judgment, systematic evidence-led problem solving, attention to detail and a collaborative approach to knowledge sharing and review.
  • Ability to use approved AI tools responsibly, validate outputs and protect customer, employee and company data.

Nice to have

  • Azure security, Kubernetes security or a recognised cyber-security certification.
  • Experience with ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments.
  • Experience threat modelling AI-enabled systems, APIs or agentic automation.

Culture & Benefits

  • Regular full-time employment with 37.5 scheduled hours per week.
  • AI-enabled working is a core expectation, with performance assessed through quality, reliability, cycle time, risk control and knowledge transfer.
  • Practical commitment to continuous learning, responsible AI adoption, collaboration and sharing knowledge.
  • Remote work from the UK.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →