Discover a world of endless possibilities with Cambridge University Press & Assessment, a distinguished global academic publisher and assessment organisation proudly affiliated with the prestigious University of Cambridge.   We are looking for a Cloud Security Engineer to join our global Group Security department and be a key member of the virtual Infrastructure Security Delivery team. Your goal will be to ensure continual security improvement within the delivery and management of our cloud platforms. It is essential that you have knowledge in securing AWS services, but knowledge of securing Azure services is also beneficial. This role is the lead for all matters pertaining to public cloud security management at Cambridge.   Why Cambridge?   At Cambridge, our unwavering commitment is to excel in education, learning, and research on a global scale. With a presence in over 170 countries, we empower millions of individuals, unlocking their potential and enabling their success. From dedicated teachers shaping young minds to visionary researchers pushing the boundaries of knowledge, we embody a relentless pursuit of enlightenment, curiosity, and understanding.   We embrace change as an opportunity for growth and progress, constantly adapting to meet the evolving needs of our customers. Collaboration and attentive listening are at the heart of our journey, as we work hand in hand with our customers and each other to innovate and discover more effective ways to achieve our goals. We believe people thrive in an environment where Trust and Empowerment are at the forefront, which is why all our new team members are provided regularisation on their first day so they can start #PursuingPotential from day one.   Joining Cambridge means becoming a part of an extraordinary institution renowned worldwide. Beyond that, you'll become a part of a vibrant and forward-thinking community that transcends tradition, fostering a culture of continuous growth and personal development. Here, we provide the perfect environment for you to thrive, supporting your professional journey and empowering you to reach your highest potential.   What can you get from Cambridge?   In this role, you'll have the opportunity to collaborate with colleagues from diverse branches, expanding your horizons and enriching your understanding of different cultures. We value your wellbeing and offer stability, fostering your professional and personal growth through internal and external activities and training sessions to help enrich your skillset.   Enjoy work-life balance flexibility through our range of options, including flexible schedules, hybrid work arrangements, and generous paid leave. As a regular employee on Day One, you'll have access to comprehensive healthcare benefits, ensuring your peace of mind with coverage for dependents, group life insurance, and robust well-being programs.

What makes you the ideal candidate in this role?   As a specialist Cloud Security Engineer, you will play a crucial role as a member of the virtual Infrastructure Security delivery team, with accountability to Cambridge's global Group Security department, meaning a close interaction with colleagues within the wider Security Engineering team each with their own specialisms. Your expertise and insights will ensure that effective security measures are embedded within Cambridge's use of AWS and Azure cloud platforms, and that advancements in the use of cloud have security oversight.   Please note that this role's working hours will align with the UK time zone.   The following will help you be an ideal candidate for this post:  

5+ years of experience working within and securing AWS services, knowledge of Microsoft Azure services and security would additionally be beneficial.

Demonstrable ability of assessing, planning, and implementing security controls within cloud.

Knowledge and expertise with cloud security platforms such as AWS GuardDuty, Inspector, and Control Tower, Azure Security Center and third-party platforms such as for Cloud Security Posture Management and SIEM systems.

Proficiency with DevSecOps practices, including embedding security components within build pipelines.

Certifications in security and public cloud is an advantage (e.g. ISC2 CCSP, AWS Certified Security Specialty, Microsoft Azure Security Engineer, or similar).

Skilled with common scripting languages such as PowerShell, Python, or similar.

  If you have the drive to develop a security-minded culture within Cambridge's infrastructure and public cloud platform, and the desire to be part of a globally renowned institution that celebrates innovation, embraces inclusion, and empowers learners, we invite you to pursue your potential with us.