Cloud Security Engineer - Financial Services

Robert Walters
London
3 weeks ago
Create job alert

My client, a major Financial Services institution, based in London, are looking for a Cloud Security Engineer Specialist to join their growing team.

About the Cloud Security Engineer Role:

The Cloud Security Engineer role is responsible for the delivery of security related activities and maintenance and enhancements of security solutions to improve the security posture of the firm.

This individual will interact with the IT Security Architecture Team, IT Security Operations Team, Project Management Teams, global IT Teams, and outsourcing partners to deliver solutions that enhance the security program for my client.

Essential Function / Major Duties and Job Responsibilities

Strategic

  • As part of the Security Engineering team, develop and implement my client's security strategy in consultation with my client's IT teams, ensuring that all initiatives are mirrored in respective strategies including the overall client Strategy.
  • Provide security advice and support for information technology projects.
  • Research new security related products and services to ensure that my client is equipped with appropriate industry best of breed tools and solutions.

Operational

  • Facilitate definition, monitoring and enforcement of secure configurations for on-premise infrastructure and applications and cloud based environments, such as SaaS, IaaS and PaaS.
  • Operate and maintain my client's Security controls related to configuration compliance.
  • Review and help refine Security procedures to ensure compliance with cyber resilience requirements.
  • Be responsible when assigned ownership of Security related Regulatory and Internal Audit finding(s) and provide effective / timely resolution.
  • Design and integrate consistent security solutions across my client's on-premises and cloud environments.
  • Oversee design principles and controls relating to third party solution providers.

Leadership

  • Work as a team member and individual contributor being able to work independently and confidently without direct supervision.
  • Through example and behaviour, strive to provide peer leadership to other team members with the goal of being excellent service providers and enablers to other constituencies (both internal and external).
  • Strong communication (verbal and written) skills to engage with technical and non-technical audiences.
  • Ability to clarify technical detail and confidently communicate business risks to senior management.
  • Execute my Security Engineering team's vision and mission in alignment with the overall Security vision and mission, as well as my client's strategic direction as it pertains to cyber resilience.

Experience / Essential and Desired for Successful Job Performance

  • A minimum of 5 years of information security experience with at least 2 years in cloud security.
  • Knowledge of hardening standards such as CIS benchmarks, STIGs and NSA/CISA configuration baselines.
  • Knowledge of the following: firewalls, switches, routers, application servers, web servers, databases, operating systems.
  • Sound knowledge of enterprise security concepts/frameworks and products, secure design principles and patterns.
  • Monitor, tune, and develop technical my client's Security controls and frameworks to ensure appropriate preparation, monitoring, and response to threats.
  • Ability to collaborate effectively with others to drive forward key security objectives.
  • Strong documentation and report writing skills (to both technical and business audiences).
  • Excellent time management and organizational skills combined with technical my Security acumen.
  • Financial and/or Banking industry experience preferred.

Qualifications / Certifications

  • B.S. in a technology discipline (Computer Science, Information Management, Computer Engineering, Cybersecurity or equivalent) or Security Certifications such as CISSP, SANS GIAC GSEC, GCED, GCIA, GCIH, GREM; or Cisco CCNA, CCNP; or equivalent.
  • Industry recognized cloud security qualifications (e.g. CCSK, CCSP, AWS Security Fundamentals, AWS Certified Security).
  • Working knowledge of the following frameworks and regulations: ISO 27001/2, SANS Top 20 Critical Security Controls, NIST CSF, and FFIEC handbook.

If the above is of interest please apply to this role or call me on to find out more.

About the job

Contract Type: FULL_TIME

Specialism: Information Technology

Focus: Information Security

Industry: Banking

Salary: £100,000 - £115,000 per annum

Workplace Type: Hybrid

Experience Level: Senior Management

Location: London

Job Reference: 0UV0XA-04B747F8

Date posted: 18 February 2025

Consultant: Darius Goodarzi

#J-18808-Ljbffr

Related Jobs

View all jobs

Cloud security engineer

Cloud Security Engineer

Cloud Security Engineer (VM Compliance)

Cloud Security Engineer - Financial Services

Senior Security Engineer

Cloud Security Engineer - Go

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

10 Must-Read Cyber Security Books for UK Professionals: Boost Your Career and Stay Ahead of Threats

With rapid advancements in digital infrastructure, cloud computing, and the Internet of Things (IoT), cyber threats continue to evolve at lightning speed. For organisations across the UK—and globally—robust cyber security is no longer optional: It’s a strategic imperative. From healthcare and finance to government agencies and tech start-ups, every sector needs skilled professionals to safeguard critical data and protect users. If you’re looking to break into or advance within the cyber security industry, staying updated on the latest techniques, threat landscapes, and defence strategies is paramount. One of the best ways to build and sharpen your expertise is by reading authoritative, high-quality books that combine foundational knowledge with cutting-edge insights. In this guide, we’ve compiled a list of ten books that cater to various skill levels, spanning ethical hacking and threat intelligence to secure software development and cryptography. By diving into these resources, you’ll fortify your understanding of cyber security fundamentals, explore hands-on techniques for defending systems, and gain the strategic perspective needed to excel in roles throughout the UK’s thriving cyber security landscape.

Navigating Cybersecurity Career Fairs Like a Pro: Preparing Your Pitch, Questions to Ask, and Follow-Up Strategies to Stand Out

In a world where digital threats are escalating and online infrastructure underpins nearly every aspect of our personal and professional lives, cybersecurity has swiftly become one of the most sought-after career fields. Demand for skilled cybersecurity professionals outstrips supply, both in the UK and globally. From ethical hackers and penetration testers to governance, risk, and compliance (GRC) specialists, the opportunities are extensive—and lucrative. Amidst this surge in demand, cybersecurity career fairs provide an invaluable chance to meet potential employers face-to-face, gain industry insights, and make connections that can accelerate your career trajectory. Unlike applying to countless jobs online, these events bring companies, security leaders, and aspiring candidates together under one roof. When approached with the right strategy, a single conversation at a cybersecurity fair can open the door to your dream job. In this comprehensive guide, we’ll explore how to prepare thoroughly, engage confidently, and follow up effectively after a cybersecurity career fair. By incorporating these insights into your approach, you’ll stand out from the crowd and maximise your chances of securing the perfect role in this fast-growing field.

Common Pitfalls Cyber Security Job Seekers Face and How to Avoid Them

The cyber security industry in the UK and worldwide is experiencing rapid growth. With cyber attacks growing in sophistication and frequency, organisations are investing more resources than ever into defending their digital assets. From penetration testers and threat analysts to security architects and compliance officers, cyber security professionals are in high demand across a variety of sectors—including finance, healthcare, government, and retail. Yet, in spite of this high demand, the process of landing a cyber security role can be more challenging than many candidates anticipate. The stakes are high: prospective employers entrust cyber professionals with their most sensitive data, their compliance posture, and often their core business operations. Therefore, they’re looking for candidates who can demonstrate not just technical know-how, but also excellent communication, adaptability, and an awareness of the broader business context. In this article, we’ll explore the most common pitfalls that cyber security job seekers face, especially in the UK market, and how to avoid them. Whether you’re a recent graduate, a professional transitioning from a different field, or an experienced practitioner aiming for a senior role, these insights will help you stand out and secure the opportunities that fit your skill set and career goals.