Senior Information Cloud Security Engineer
National Retail Federation19 hours ago
London, United KingdomSenior
Responsibilities
- Define and improve security controls and reference architectures across Azure, AWS, cloud-native services, SaaS platforms, containers, serverless workloads, virtual machines, storage, databases, APIs, and network services.
- Assess cloud architectures and configurations for identity, network exposure, encryption, secrets and key management, logging, resilience, data protection, and secure administrative access.
- Lead investigations involving cloud identities, service principals, managed identities, workload identities, API permissions, privileged access, exposed services, misconfigurations, and suspicious cloud activity.
- Own cloud security posture, workload protection, vulnerability and exposure management, finding validation, risk prioritization, remediation tracking, exception handling, and governance integration.
- Define and apply security requirements for generative AI, copilots, agents, machine-learning services, and AI-enabled SaaS solutions.
- Assess AI-specific threats such as prompt injection, sensitive-data leakage, insecure agent actions, excessive permissions, unapproved integrations, third-party model risk, and inadequate monitoring.
- Build automation and control-validation solutions using PowerShell, Python, KQL, APIs, policy-as-code, infrastructure-as-code, cloud-native functions, and workflow technologies.
- Develop cloud and AI security standards, architecture patterns, procedures, runbooks, assessment methodologies, dashboards, technical reports, and executive-ready summaries.
- Provide technical input to incidents, threat-led investigations, audits, assurance reviews, risk assessments, and client inquiries.
- Provide technical leadership, coaching, knowledge transfer, and escalation support for complex cloud and AI security issues.
Requirements
- At least 5 years of relevant experience in cloud security, security engineering, cloud architecture, DevSecOps, or a closely related technical discipline.
- Recent hands-on experience securing public-cloud environments such as Azure and GCP in a large or complex enterprise.
- Strong knowledge of cloud identity and access management, workload identities, privileged access, federation, conditional access, service principals, managed identities, and least-privilege design.
- Experience assessing cloud architectures and configurations across compute, storage, databases, networking, containers, serverless technologies, APIs, key management, secrets management, and logging.
- Experience with cloud security posture management, cloud workload protection, vulnerability management, attack-surface management, and risk-based remediation.
- Experience defining or evaluating security controls for generative AI, enterprise copilots, AI agents, machine-learning platforms, or AI-enabled SaaS solutions.
- Ability to automate security processes and control validation using PowerShell, Python, KQL, APIs, policy-as-code, infrastructure-as-code, cloud-native functions, or comparable technologies.
- Experience reviewing cloud solution designs and integrations for authentication, authorization, network controls, encryption, data protection, logging, monitoring, resilience, and secure operational ownership.
- Experience producing architecture guidance, technical standards, operational procedures, dashboards, risk assessments, and reports for technical and non-technical audiences.
- Working knowledge of ISO 27001, NIST, CIS Benchmarks, cloud security control frameworks, secure development practices, and emerging AI risk-management guidance.
- Strong stakeholder-management, communication, independent-working, prioritization, and initiative-leadership skills in a global, matrixed environment.
- Preferred qualifications include relevant cloud security, cloud architecture, DevSecOps, or AI security certifications; multi-cloud, Kubernetes security, CI/CD security, infrastructure-as-code scanning, AI governance, AI red teaming, AI threat modelling, secure AI architecture, or AI security testing experience; and regulated professional-services experience.
Benefits
- The enabled work model provides flexibility to work from both the office and a remote location.
- The firm offers family-friendly and inclusive employment policies and access to health and wellbeing programs and services.
- The employer provides an inclusive and accessible recruitment process with tailored adjustments or accommodations available upon request.
Tech Stack
Categories
About National Retail Federation
The National Retail Federation is a nonprofit trade association for retailers and retail technology vendors, funded by membership dues, sponsorships, and events. It advocates on policy, publishes research and education, and runs industry conferences such as NRF’s annual Big Show. Founded in 1911 and headquartered in Washington, DC, it represents retailers of all sizes across the U.S. and abroad.