National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

IT Cloud & Applications Security Analyst

UK Atomic Energy Authority
London
1 day ago
Create job alert

Company Description

By 2050, the planet could be using twice as much electricity compared to today. Are you interested in contributing and helping to shape the future of the world's energy? If so, read on.

Fusion, the process that powers the Sun and Stars, is one of the most promising options for generating the cleaner, carbon-free energy that our world badly needs.

UKAEA leads the way in realizing fusion energy, partnering with industry and research for groundbreaking advancements. Our goal is to bring fusion electricity to the grid, supported by tomorrow's power stations. In pursuit of our mission, UKAEA embraces core values: Innovative, Committed, Trusted, and Collaborative.

As an employee of UKAEA you will benefit from:
Outstanding

defined benefit pension scheme,

details of which can be found at the end of this advert.
Corporate

bonus scheme up to 7

%

and a

Relocation

allowance (if eligible).
Flexible working options

including family friendly policies and the right to request flexible working from the start of your employment.
Employee Assistance Programme

and trained Mental Health First Aiders,
Generous annual leave

allowance starting with 25 days, plus 3 days Christmas closure and 2.5 privilege days, in addition to UK bank holidays
Wide range of

career development opportunities
A vibrant

culture

committed to equality and being fully

inclusive

The salary for this role is

£42,858.

O nsite working

is expected for 2-3

days a week, however, we actively support requests for flexible working.

Job Description

This role is based at the following site;

Culham, Oxfordshire.

This role requires employees to

complete an online Baseline Personnel Security Standard (BPSS) / be eligible for SC Clearance (must have resided in the UK for the last 5 years) , including The Disclosure & Barring Service (DBS) checks for criminal convictions.

The Role

Are you looking for an exciting opportunity to make a difference?

Join us in shaping a secure digital future for sustainable fusion energy.

The

UK Atomic Energy Authority (UKAEA)

is a world leader in developing nuclear fusion as a clean and limitless energy source. As part of our mission, we're building a digitally mature and secure enterprise. This role offers you the opportunity to be at the heart of that transformation.

We're looking for a

skilled and ambitious IT Cloud & Applications Security Analyst

to join our

Information & Cyber Security Group . If you have experience securing cloud environments and business applications and want to help shape UKAEA's cyber resilience across M365, Azure, and beyond-this is your next step.

What you'll be doing:

You'll play a key role in protecting our hybrid cloud infrastructure, identity services, and SaaS applications. Working closely with engineering and security teams, you will:
Monitor and respond to security events affecting cloud platforms and applications
Support the design and implementation of IAM and PAM policies across Entra ID and M365
Manage posture and compliance monitoring tools (Defender, Intune, Sentinel)
Support DevSecOps practices in collaboration with platform and application teams
Help ensure application-level security is embedded across our enterprise stack
Contribute to audits and assessments aligned to ISO 27001, CAF, and Secure by Design
Provide input on best practices for cloud security and access management.

Qualifications

Essential
Atleast a HND in Information Security, Computer Science, or a related STEM field, or equivalent experience. Degree Preferred
Demonstrable hands-on experience with Microsoft Entra ID (Azure AD), Conditional Access, and Identity Protection.
Experience administering Microsoft 365 security controls, including Defender for Office 365, Purview, and Intune.
Understanding of modern authentication protocols (OAuth2.0, SAML, OpenID Connect).
Familiarity with SaaS security, user lifecycle management, and enterprise access models.
Working knowledge of security and compliance frameworks such as CAF, ISO 27001, NIST CSF, and GDPR.
Analytical and investigative skills with the ability to identify risk patterns and remediation actions.
Experience managing technical controls in cloud-native platforms (Azure, AWS, or GCP).
Knowledge of Privileged Identity Management (PIM), Just-In-Time (JIT) access, or PAM solutions.
Experience supporting regulatory audits or security assurance reviews.
Strong documentation and communication skills to support audits and security reviews.
Ability to obtain SC-level national security clearance

Desirable
Certifications such as AZ-500, SC-300, or equivalent.
Experience with Power Platform, Dataverse, and automation tooling.
Exposure to DevSecOps practices, CI/CD security, and secure SDLC.
Familiarity with ITSM workflows and change control procedures.

Additional Information

A full list of our benefits can be found herehttps://careers.ukaea.uk/life-at-ukaea/employee-benefits/

We welcome applications from under-represented groups, particularly individuals from black and other ethnic minority backgrounds, people with disabilities, and women. Our Executive team, supported by our 'Equality, Diversity and Inclusion' (EDI) Partner and Inclusion Ambassadors, actively promotes EDI and takes steps to increase diversity within our organization. We reinforce best practices in recruitment and selection and evaluate approaches to remove barriers to success.

Please note that vacancies are generally advertised for 4 weeks but may close earlier if we receive a large number of applications.

Videos To Watch
https://youtu.be/9ycme04durI
#J-18808-Ljbffr

Related Jobs

View all jobs

IT Cloud & Applications Security Analyst

IT Cloud & Applications Security Analyst

Security Engineer (Pen Tester)

Senior Cloud Security Engineer

Cyber Security Analyst

Infrastructure Security Analyst, Qualys, SCCM, Hybrid

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How to Present Cyber Security Solutions to Non-Technical Audiences: A Public Speaking Guide for Job Seekers

Cyber security is no longer just an IT issue—it’s a board-level priority. Whether you’re applying for a role in penetration testing, security operations, risk management, or compliance, your ability to clearly explain cyber threats and solutions to non-technical stakeholders is vital. This guide will help cyber security job seekers develop one of the most in-demand soft skills in the industry: public speaking. You’ll learn how to simplify complex concepts, structure effective presentations, use storytelling and analogies, and handle common stakeholder questions with confidence.

Cyber Security Jobs Employer Hotlist 2025: 50 UK Companies Actively Hiring Right Now

Bookmark this guide—refreshed every quarter—so you always know who’s really expanding their cyber security teams. Ransomware payouts broke records in 2024, the UK’s new Cyber Security Bill imposed mandatory breach disclosure, and the National Cyber Force’s move to Samlesbury has super‑charged the northern skills market. Result? Demand for security architects, SOC analysts, penetration testers, cloud‑security engineers, threat hunters & GRC specialists is at an all‑time high in 2025. Below you’ll find 50 organisations that have posted UK‑based cyber security vacancies or announced head‑count growth during the past eight weeks. They’re organised into five quick‑scan categories. For every employer you’ll see: Main UK hub Example live or recent vacancy Why it’s worth a look (tech stack, culture, mission) Search any company on CyberSecurityJobs.tech to view current ads, or set a free alert so fresh openings land straight in your inbox.

Return-to-Work Pathways: Relaunch Your Cyber Security Career with Returnships, Flexible & Hybrid Roles

Re-entering the workforce after a career break can feel especially challenging in a fast-moving field like cyber security. Whether you stepped away for parenting, caregiving or another life chapter, the UK’s cyber security sector now offers a range of return-to-work pathways—from structured returnships to flexible and hybrid roles. These programmes value the transferable skills and resilience you’ve developed during your break, pairing you with mentorship, upskilling opportunities and supportive networks to ease your transition back into cyber security. In this article, tailored for parents and carers, you’ll discover how to: Understand the growing demand for cyber security talent in the UK Translate your organisational, communication and problem-solving skills into cyber security roles Tackle common re-entry challenges with practical solutions Refresh your technical knowledge through targeted learning Access returnship and re-entry programmes specific to cyber security Find roles that accommodate family commitments—whether hybrid, flexible or full-time Balance your career relaunch with caring responsibilities Master applications, interviews and networking in cyber security Draw inspiration from real returner success stories Whether you aim to return as an analyst, penetration tester, security engineer or compliance specialist, this guide will equip you with the steps and resources to reignite your cyber security career.