Cloud Security Engineer

As a Cloud Security Engineer within the Cyber Engineering & Architecture function, this role owns the definition, governance and continuous improvement of our customer's cloud security posture across IaaS, PaaS and SaaS services. This hands‑on role provides security architecture, standards and control governance for cloud platforms, ensuring secure‑by‑design patterns, guardrails and posture management that protect critical services and data while enabling rapid delivery. In addition to deep expertise in cloud security, the role holder is expected to collaborate and support with the wider Cyber Engineering team, supporting resilience in cyber domains, and creating an integrated strategy to protect applications, assets and data.

This is a hybrid role, so the successful candidate will be expected to attend the office in Dublin at least once a week.

Required Experience:

• 5+ years in cloud security / cyber engineering roles.
• Proven hands‑on experience securing cloud environments using native security controls and patterns (IAM, networking, logging, encryption)
• Experience with Cloud Security Posture Management (CSPM), building compliance detection and enforcement policies, and remediation of cloud misconfigurations.
• Experience working with Cloud Operations teams to implement security standards via change and delivery processes.
• Cloud security certifications (e.g., AWS Security Specialty, CCSP, or equivalent).
• Direct experience with shared responsibility models and secure cloud architecture patterns.
• Ability to define pragmatic security standards and blueprints that enable delivery teams to reduce risk.
• Strong capability in security control design for IAM, network security, data protection and resilience within cloud environments.
• Comfortable working with automation and infrastructure‑as‑code concepts to reduce manual control drift.
• Hands-on experience with Cloud Security Posture Management platforms e.g. Palo Prisma Cloud, CrowdStrike CSPM

Key responsibilities & duties include:

• Own cloud security policies, standards, secure‑by‑design architectures and baseline control requirements across IaaS, PaaS and SaaS.
• Define and govern cloud security posture management requirements and remediation workflows (including risk‑based prioritisation and exception handling).
• Establish secure cloud architecture patterns for network segmentation, IAM design, secrets management, encryption, key management and secure connectivity.
• Ensure cloud logging and monitoring requirements are defined and implemented to enable protective monitoring and incident investigation.
• Partner with Cloud Ops to embed automated guardrails and policy-as-code where appropriate, reducing manual control drift and enabling scale.
• Act as cloud security SME for incidents and high‑risk findings, supporting containment and root‑cause remediation.
• Provide security architecture reviews for new cloud services and significant changes, ensuring alignment to standards and enterprise architecture.
• Collaborate with Cyber Defence to ensure cloud telemetry and detections are aligned with monitoring coverage and response playbooks.
• Contribute to cloud security awareness and enablement for delivery teams (secure patterns, anti‑patterns, and reusable blueprints).
• Support multi‑cloud risk assessments and third‑party SaaS security reviews where required.