About Darkshield
Darkshield is an expert cybersecurity agency based in York, UK. We help organisations navigate an increasingly complex digital landscape by providing expert services in penetration testing, vulnerability assessment, managed security, and compliance. Our mission is to protect businesses by delivering tailored, cutting-edge cybersecurity solutions that keep them resilient and ahead of cyber threats.
The Role
We are looking for a Cloud Security Engineer to join our growing team. This role involves designing, implementing, and managing security solutions across AWS, Azure, and Google Cloud. The ideal candidate will have a deep understanding of cloud security architectures, automation, and compliance frameworks.
Key Responsibilities
Cloud Security Architecture & Implementation
- Design and implement cloud security architectures across AWS, Azure, or Google Cloud.
- Develop and enforce cloud security controls, including IAM policies, encryption, and network security.
Threat Monitoring & Incident Response
- Monitor cloud environments for security threats, vulnerabilities, and misconfigurations.
- Lead incident response efforts related to cloud security breaches and misconfigurations.
- Implement SIEM and security monitoring tools for real-time threat detection.
Cloud Security Assessments & Compliance
- Conduct cloud security assessments, penetration testing, and risk analysis.
- Ensure compliance with ISO 27001, NIST, CIS Benchmarks, GDPR, and other security standards.
- Collaborate with DevOps teams to integrate security into CI/CD pipelines.
Security Automation & Infrastructure as Code (IaC)
- Automate security policies and compliance enforcement using Python, Terraform, Ansible, or CloudFormation.
- Develop security automation scripts for vulnerability scanning and patch management.
Collaboration & Knowledge Sharing
- Provide guidance and best practices to internal teams on cloud security.
- Work closely with developers, DevOps, and compliance teams to align security requirements.
Required Qualifications & Experience
Technical Skills & Experience
- At least three years of experience in cloud security engineering or a related role.
- Hands-on expertise securing AWS, Azure, or Google Cloud platforms.
- Strong knowledge of IAM, firewalls, WAFs, encryption, and security groups.
- Experience with security automation using Python, Terraform, or CloudFormation.
- Familiarity with container security (Kubernetes, Docker) and microservices security.
Certifications (Preferred, Not Required)
- AWS Certified Security – Specialty
- Azure Security Engineer Associate (AZ-500)
- Google Professional Cloud Security Engineer
- CISSP, OSCP, CEH, or relevant security certifications are a plus.
Soft Skills & Work Environment
- Strong problem-solving skills and ability to think like an attacker.
- Excellent communication and collaboration skills to work with cross-functional teams.
- Ability to work independently and handle multiple projects in a fast-paced environment.
Success Criteria (Performance Expectations)
To ensure a strong match, the ideal candidate should:
- Implement cloud security controls across at least one major cloud provider within the first three months.
- Conduct at least two full cloud security assessments per quarter.
- Develop automated security enforcement scripts that reduce vulnerabilities by 30 percent within the first six months.
Why Join Darkshield?
- Work on cutting-edge cybersecurity projects with top-tier clients.
- Career growth opportunities in a fast-growing cybersecurity agency.
- Flexible work environment – remote and hybrid options available.
- Competitive salary and bonuses based on security impact and research.
