Cloud Security Engineer

About the role

Kainos is looking for a mid‑level Cloud Security Engineer to become the first dedicated cloud security hire. Reporting to the Head of Security Engineering, you will shape and mature the security posture across Azure, AWS and SaaS environments while collaborating with SOC, GRC, IT and engineering teams.

Key responsibilities

• Define and implement a cloud security framework in partnership with IT, SOC and GRC.
• Recommend and deploy security best‑practice controls and automated tooling for validation and issue detection.
• Develop threat detection and incident‑response playbooks for cloud workloads and work with the SOC to operationalise them.
• Support GRC audits and evidence collection for ISO‑27001, NCSC Cloud Security Principles and SOC 2.
• Prioritise security findings into actionable stories for delivery teams.
• Guide developers and junior engineers on secure cloud practices and provide training.
• Contribute to IAM strategy (RBAC, Conditional Access, MFA, least‑privilege).
• Optional: Automate cloud security via IaC scanning and CI/CD integration, and produce runbooks and training material.

Required profile

• Previous experience in cloud security engineering or a closely related role.
• Familiarity with industry cloud security frameworks such as CSA STAR and NCSC Cloud Security Principles.
• Hands‑on experience with automation and scripting (Python, PowerShell, Bash).
• Proficiency with Azure security services (Defender for Cloud, Entra ID, Sentinel) and AWS security services (Security Hub, GuardDuty, IAM, Config, CloudTrail).

Required skills

• Python
• PowerShell
• Bash
• Azure Defender for Cloud
• Azure Entra ID
• Azure Sentinel
• AWS Security Hub
• AWS GuardDuty
• AWS IAM
• AWS Config
• AWS CloudTrail
• CSA STAR framework
• NCSC Cloud Security Principles

What we offer

• Opportunity to define the cloud security function from the ground up.
• Collaborative, people‑first culture with continuous learning.
• Exposure to multi‑cloud environments and cutting‑edge security tooling.