Associate Cloud Security Engineer

Role Overview

We seek a motivated Cloud Security Engineer at a junior to mid-level to help implement and manage robust security controls for our cloud-based platforms. The ideal candidate will have a growing background in cybersecurity engineering coupled with cloud practices, and a strong appetite to learn. As a Cloud Security Engineer, you will play an important role in safeguarding our business cloud environments against potential threats and vulnerabilities. Working alongside senior engineers and the broader technology team, you will help identify vulnerabilities, develop solutions, and deploy effective controls to ensure our data and systems' confidentiality, integrity, and availability. This is a hands-on growth role that requires solid technical foundations and a genuine interest in information security best practices.

Location

This position will be based in either our Frankfurt (Germany) or London (United Kingdom) office. The candidate is required to attend the office a minimum of 3 days per week but may voluntarily elect to work either remotely or from the office for the remaining days of the week.

Key Responsibilities

• Support the design and implementation of security controls for cloud-based platforms, helping ensure compliance with industry standards and regulations such as ISO 27001, FedRAMP, NIST, IRAP, and SOC 2.

• Assist with technical risk assessments of cloud infrastructure and applications, helping identify potential security gaps and recommending countermeasures.

• Assist with the development and maintenance of cyber security technical controls and operations, standards, and procedures for cloud deployments in collaboration with cross-functional teams.

• Support technical third-party security audits and assessments.

• Help identify and assess vulnerabilities, risks, and cyber security threats and their impact on Nuix's platforms and applications.

• Help implement and configure security controls across various cloud services, such as AWS and Azure.

• Participate in incident response activities under guidance, including supporting investigations of security breaches and helping implement corrective actions to prevent recurrence. Monitor and analyse security logs, alerts, and events to help identify and respond to security incidents and threats.

• Collaborate with development and operations teams to help integrate security into the software development lifecycle (SDLC) and DevOps processes.

• Help manage and maintain security infrastructure, including vulnerability scan tools, intrusion detection and prevention systems, anti-malware solutions, and other security platforms.

Skills, Knowledge and Expertise

• Tertiary qualification in Computer Science or related field, or relevant experience.

• Up to 3 years of experience in cybersecurity or IT roles, with some exposure to cloud security (including internships, graduate programs or relevant project work). Candidates at the mid-level end may have 2–3 years with focused cloud security experience.

• Some experience working as an IT Security Engineer or in a similar role, with a focus on information security, is desirable.

• Foundational knowledge of network and system security principles, practices, protocols, and technologies.

• Hands-on exposure to cloud platforms such as AWS, O365 and Azure.

• Working knowledge of security technologies and protocols, such as Vulnerability tools, Data protection, encryption, IAM, endpoint detection, and event/incident management.

• Familiarity with industry security standards and frameworks, such as ISO 27001, NIST, and CSA.

• Good analytical and problem-solving skills, with a willingness to tackle complex security issues and develop effective solutions.

• Strong communication and interpersonal skills, with the ability to collaborate effectively with diverse teams and stakeholders.

• Entry-level or associate certifications (e.g., AWS Certified Cloud Practitioner, Azure Fundamentals AZ-900, CompTIA Security+, or working towards AWS Certified Security – Specialty / CCSP) preferred.

• Experience with scripting and automation tools for security tasks (e.g., Python, PowerShell) is a plus.

• Awareness of EMEA regulatory and data-protection requirements (e.g., GDPR) is a plus.