Cloud Security Engineer - 4430

at  Cambridge University Press Assessment

Discover a world of endless possibilities with Cambridge University Press & Assessment, a distinguished global academic publisher and assessment organisation proudly affiliated with the prestigious University of Cambridge.
We are looking for a Cloud Security Engineer to join our global Group Security department and be a key member of the virtual Infrastructure Security Delivery team. Your goal will be to ensure continual security improvement within the delivery and management of our cloud platforms. It is essential that you have knowledge in securing AWS services, but knowledge of securing Azure services is also beneficial. This role is the lead for all matters pertaining to public cloud security management at Cambridge.

As a specialist Cloud Security Engineer, you will play a crucial role as a member of the virtual Infrastructure Security delivery team, with accountability to Cambridge’s global Group Security department, meaning a close interaction with colleagues within the wider Security Engineering team each with their own specialisms. Your expertise and insights will ensure that effective security measures are embedded within Cambridge’s use of AWS and Azure cloud platforms, and that advancements in the use of cloud have security oversight.
Please note that this role’s working hours will align with the UK time zone.

The following will help you be an ideal candidate for this post:

• 5+ years of experience working within and securing AWS services, knowledge of Microsoft Azure services and security would additionally be beneficial.
• Demonstrable ability of assessing, planning, and implementing security controls within cloud.
• Knowledge and expertise with cloud security platforms such as AWS GuardDuty, Inspector, and Control Tower, Azure Security Center and third-party platforms such as for Cloud Security Posture Management and SIEM systems.
• Proficiency with DevSecOps practices, including embedding security components within build pipelines.
• Certifications in security and public cloud is an advantage (e.g. ISC2 CCSP, AWS Certified Security Specialty, Microsoft Azure Security Engineer, or similar).
• Skilled with common scripting languages such as PowerShell, Python, or similar.

If you have the drive to develop a security-minded culture within Cambridge’s infrastructure and public cloud platform, and the desire to be part of a globally renowned institution that celebrates innovation, embraces inclusion, and empowers learners, we invite you to pursue your potential with us