How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cloud Security Engineer
At Kainos, we’re problem solvers, innovators, and collaborators — driven by a shared mission to create real impact. Whether transforming digital services for millions, delivering cutting-edge solutions, or pushing the boundaries of technology, we do it together.
We believe in a people-first culture, where your ideas are valued, your growth is supported, and your contributions truly make a difference. Here, you’ll be part of a diverse, ambitious team that celebrates creativity and collaboration. Ready to make your mark? Join us and be part of something bigger.
About the Role
We are seeking a mid-level Cloud Security Engineer to join our Security Engineering team. This role is critical for our company’s first dedicated cloud security hire, defining, implementing, and managing security controls across our Azure, AWS, and SaaS environments. As a key contributor, you will work collaboratively with SOC, GRC, IT, Modern Workplace, and Systems Engineering teams, while reporting directly to the Head of Security Engineering.
Key Responsibilities
Cloud Security Framework
- Define and implement the company-wide cloud security framework in collaboration with IT Systems, SOC leadership, and GRC.
- Recommend security best practices and implement governance controls for cloud environments.
Implementation
- Develop automated security tooling to validate security requirements and flag potential risks.
- Enforce security policy compliance through technical and procedural mechanisms.
Threat Detection & Incident Response
- Design threat detection processes and incident response plans tailored for multi-cloud environments.
- Partner with the SOC team to operationalise detection rules and refine incident-handling playbooks.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Compliance & Audit
- Support GRC initiatives to meet evidence requirements for:
- ISO 27001
- NCSC Cloud Security Principles
- SOC 2 compliance
- Review security tool outputs and translate findings into actionable security stories for delivery teams.
Collaboration & Enablement
- Guide junior engineers and developers in adopting secure coding and deployment practices.
- Upskill and mentor the security team on cloud-specific security topics and tooling (e.g., identity governance, encryption).
Identity & Access Management (IAM)
- Contribute to and refine the company’s IAM policies, including:
- Role-Based Access Control (RBAC)
- Conditional Access Policies
- Multi-Factor Authentication (MFA)
- Least-Privilege Models
Optional Focus Areas:
- Assist in automating cloud security (IaC scanning, CI/CD integration).
- Develop and maintain documentation (standards, runbooks, training materials).
- Leverage security automation frameworks for repeatability.
Required Skills & Experience
- Demonstrated experience in cloud security engineering or a closely related role.
- Veteran of one or more cloud providers, evidenced by hands-on experience with:
- Azure security tools (Microsoft Defender for Cloud, Entra ID, Azure Sentinel).
- AWS security services (Security Hub, GuardDuty, IAM, Config, CloudTrail, CloudWatch).
- Proficiency in security frameworks such as:
- CSA STAR, NCSC Cloud Security Principles.
- Strong automation skills with Python, PowerShell, or Bash scripting.
- Deep understanding of:
- Multi-cloud security challenges.
- cloud incident response methodologies.
- secure architecture in ephemeral and containerised environments.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Skills & Experience
- Familiarity with Infra-as-Code (Terraform) for security policy enforcement.
- Advanced knowledge of cloud networking security (network security groups, firewall policies, private endpoints).
- Exposure to compliance frameworks:
- ISO 27001, SOC 2, GDPR, or PCI DSS.
- Certifications (non-exhaustive):
- Azure Security Engineer (AZ-500).
- Microsoft SC-100 (Secure DevOps Engineer).
- AWS Certified Security – Specialty.
- CISSP or CCSK.
Embracing Our Differences
At Kainos, we champion diversity, equity, and inclusion—believing talent thrives when we embrace difference. We welcome candidates from all backgrounds, irrespective of age, race, ethnicity, gender, sexual orientation, religion, ability, or other unique characteristics.
If you require adaptations or support to access our recruitment process, our talented team is here to help. From virtual interviews to flexible testing formats, we are committed to ensuring your experience reflects fairness and equity.
Our recruitment specialists are already ready to start a conversation with you—we’re here to build an inclusive process together.
Join us to protect, innovate, and shape the future.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills