Cloud Security Engineer page is loaded## Cloud Security Engineerlocations: Remote - UK Vestatime type: Full timeposted on: Posted 6 Days Agojob requisition id: R54325#### :# Cloud Security EngineerPOSITION SUMMARYThe Cloud Security Engineer protects Gladstone's cloud platforms and services through secure design, configuration, monitoring, automation and evidence-led remediation. The role works across Azure, Kubernetes, networks, identity, workloads, data and delivery pipelines, and supports the safe adoption of AI-enabled systems and operational tooling.AI-ENABLED WORKINGAI-enabled working is a core expectation of this role. The role holder will use approved AI tools and automation to improve quality, speed, insight and consistency; protect customer, employee and company data; Performance will be assessed through outcomes such as quality, reliability, cycle time, risk control and knowledge transfer - not simply the volume of AI-generated output or frequency of tool use.KEY RESPONSIBILITIESCloud Security Engineering- Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.

- Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production.
- Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation where appropriate.
- Support secrets, key, certificate, privileged-access and service-account lifecycle management.Detection, Response and Vulnerability Management- Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures.
- Prioritise remediation using exploitability, exposure, business impact and compensating controls rather than severity labels alone.
- Support security incident response,



evidence preservation, root-cause analysis and completion of corrective actions.
- Maintain clear security findings, owners, due dates, exceptions and risk acceptance records.AI and Application Security- Threat model AI-enabled services and operational agents, including data leakage, prompt injection, over-permission, unsafe actions, supplier risk and inadequate human oversight.
- Use approved AI tools to support security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data.
- Work with R&D; and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns.
- Define and test guardrails for AI access to production systems, credentials, logs and customer information.Compliance and Security Culture- Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity.
- Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working.
- Report material risks and trends clearly to the Cloud Operations Manager, Compliance Manager and relevant owners.Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response.
- Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation.
- Experience with scripting, policy-as-code,



infrastructure automation or security automation.
- Understanding of secure development and deployment practices, including secrets and pipeline security.
- Explicit documentation and communication of technical risk to different audiences.Desirable- Azure security, Kubernetes security or recognised cyber-security certification.
- Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments.
- Experience threat modelling AI-enabled systems, APIs or agentic automation.PERSONAL ATTRIBUTES- High ownership, sound judgment and a bias toward solving problems rather than moving them between teams.
- Curious and adaptable, with a practical commitment to continuous learning and responsible AI adoption.
- Clear communication with both technical and non-technical colleagues.
- Business Unit:Gladstone Software#### Scheduled Weekly Hours:37.5#### Number of Openings Available:1#### Worker Type:Regular# Career Site:#### More About Jonas Software:Jonas Software is a leading provider of enterprise management software solutions, serving a wide range of vertical markets including hospitality, healthcare, construction, education, personal care, fitness, leisure, moving and legal services, to name a few. Jonas' vision is to be the branded global leader across these verticals and to be recognized by customers and industry stakeholders as the trusted provider of "Software for Life." We are committed to technology, product innovation, quality, and exceptional customer service.Jonas Software supports over 60,000 customers in more than 30 countries. Across our broader network, we support a global workforce of more than 30,000 employees.Headquartered in Canada, Jonas Software has a global footprint with offices around the world. We're a 100% owned subsidiary of Constellation Software Inc.,

📌 Cloud Security Engineering (Winnipeg)
🏢 Vesta Software Group
📍 Winnipeg