Senior Cloud Security Engineer

Senior Cloud Security Engineer

We're ASOS, the online retailer for fashion lovers all around the world. We exist to give our customers the confidence to be whoever they want to be, and that goes for our people too. At ASOS, you're free to be your true self without judgement, and channel your creativity into a platform used by millions. But how are we showing up? We're proud members of Inclusive Companies, are Disability Confident Committed and have signed the Business in the Community Race at Work Charter and we placed 8th in the Inclusive Top 50 Companies Employer list. Everyone needs some help showing up as their best self. Let our Talent team know if you need any adjustments throughout the process in whatever way works best for you.

Job Description

As one of our Security Engineers, you are passionate about security and great engineering practices. You will join a multidisciplinary team, working together with other Security Engineers, Product Managers and Security teams. As an engineer, you will design, build and deliver secure, high-quality enterprise solutions across numerous initiatives within the organization, spreading your security knowledge to an ever-expanding engineering community, increasing our security posture and helping identify and reduce our risk exposure when building applications.

You will bring subject-matter expertise around Cloud Security to the team. You will be responsible for the design, implementation, and maintenance of our organization's cloud-based security systems. You will be a key subject-matter-expert on all things Cloud Security, helping teams make the right decisions when it comes to securing their systems. As a Cloud Security Engineer, you will need to have a thorough understanding of complex IT systems and stay updated with the latest security standards, systems, and authentication protocols, as well as various cloud services and resources.

Responsibilities

• Design, develop, and deploy innovative, AI and data-driven scalable cloud-based security solutions.
• Perform vulnerability testing, risk analysis, and security assessments against our cloud environment.
• Develop and coordinate cloud security procedures and disaster recovery plans.
• Build a deep understanding of our cloud security tooling and drive improvements in coverage and utilisation of the tools.
• Collaborate with Security Operations, Threat & Vulnerability Management and software development teams to ensure cloud solutions are securely integrated with new and existing software and infrastructure.
• Support with conducting security training and awareness programs to educate staff about cloud security risks and responsibilities.
• Work with third-party vendors to ensure that security requirements are met.
• Mentoring/Coaching lesser experienced team members to support their own development.

We believe being together in person helps us move faster, connect more deeply, and achieve more as a team. That's why our approach to working together includes spending at least 2 days a week in the office. It's a rhythm that speeds up decision-making, helps ASOSers learn from each other more quickly, and builds the kind of culture where people can grow, create, and succeed.

Qualifications

About You:

• Relevant experience gained working in Cloud Security, Platform Engineering, Software Engineering or equivalent roles.
• Proven experience in a cloud computing environment (Azure, AWS, GCP)
• Strong understanding of cloud architecture and security principles
• Strong experience with security tools and technologies
• Knowledge of regulatory requirements and industry standards related to cloud security.
• Knowledge of Infrastructure-as-code (IAC) and an understanding of misconfigurations.
• Experience building applications, scripts, pipelines or automation using modern technologies and languages such as PowerShell, YAML, Python, C#, Java, Docker, Kubernetes
• Experience with implementation of secure configurations and controls via policy and compliance frameworks
• Experience with crafting low-noise detections aligned to real-world attack behaviours

Additional Information

Benefits

• Competitive compensation and performance-related bonuses
• Professional development and career growth support
• Generous paid leave, including additional personal celebration days
• Flexible benefits allowance
• Access to learning resources and internal knowledge-sharing events
• Employee perks and wellness support options