Senior Cloud Security Engineer

About this role

Senior Cloud Security Engineer
United Kingdom (Remote)
Reporting to: Director of Cyber Security and Resilience
Remuneration: Competitive, dependent upon experience- plus £1000 working from home allowance
Contract Type:Permanent/ Full time - 40hours per week
Location:Home-based/various UK meeting locations as required
Closing Date for applications:Monday 12th October 2026*
About Us:
Psychiatry UK is the UK’s leading provider of digital psychiatry services, working both privately and with the NHS to support children, teenagers and adults with expert, patient-centred care.
A career with Psychiatry UK allows you to expand your knowledge, enhance your skills, and gain valuable life experience—all while enjoying the flexibility of a remote full-time role. As part of a leading online mental health service, you'll collaborate with innovative, forward-thinking professionals in a dynamic, multidisciplinary team committed to making a real difference.
The Senior Cloud Security Engineeris a senior, technically hands-on role with responsibility across cloud security engineering, platform assurance, DevSecOps, threat detection and continuous control improvement. The post holder will translate security policies, risk requirements and best practice into practical security guardrails, reusable patterns, automation and clear assurance evidence.
Working collaboratively across the organisation, the role will partner closely with Cyber Security, Platform Engineering, Software Engineering, Digital Workplace/IT, Data Science, Information Governance and Service Management teams, as well as selected managed-service partners, to embed effective security controls and secure-by-design principles across our technology environment.
This is a home-based role (applicants must reside in the UK), though occasional travel may be required for face-to-face meetings at various locations within the UK.
As our Senior Cloud Security Engineer, you will:
Cloud Security Architecture & Engineering

• Own and evolve security guardrails, reference architectures and technical standards across AWS, Azure and Microsoft 365.

• Design and assure security controls across identity, networking, compute, containers, storage, databases, encryption, secrets management, backup and recovery.

• Provide senior technical review and challenge of cloud designs, threat models, Architecture Decision Records and significant changes.

• Lead remediation of control gaps, ensuring security controls are practical, measurable and proportionate to risk and service criticality.

AWS Platform Security

• Support and strengthen the AWS security operating model, including landing zones, account boundaries, access controls, permission models and break-glass arrangements.

• Engineer and assure cloud-native security capabilities including IAM, KMS, CloudTrail, Config, GuardDuty, Inspector, Security Hub, CloudWatch and AWS Backup.

• Drive security improvements across AWS workloads, including EC2, RDS, S3, ECS/Fargate, Lambda, ECR and internet-facing services.

Microsoft Cloud & Identity Security

• Support and improve security across Microsoft 365 E5, Azure, Defender, Intune, Azure Virtual Desktop, Purview and SIEM capabilities.

• Work with Digital Workplace teams and managed-service partners to validate controls, evidence their effectiveness and drive remediation.

DevSecOps, Application Security & Assurance

• Embed Secure-by-Design principles across key projects through PUK’s Security and Technology Assurance Framework, maintaining proportionate and effective assurance criteria.

• Integrate security into engineering workflows, CI/CD pipelines and cloud deployment patterns while minimising unnecessary delivery friction.

• Implement and improve security testing, including SAST, SCA, secrets scanning, infrastructure-as-code, container and application security testing.

• Partner with engineering teams on threat modelling, vulnerability remediation, dependency management and release assurance, promoting secure-by-default patterns and reusable solutions.

Detection, Vulnerability Management & Incident Response

• Ensure security telemetry across cloud, identity, network, workloads and applications is complete, protected and effectively monitored.

• Lead technical assessment of complex vulnerabilities and misconfigurations, driving proportionate, risk-based remediation.

• Act as a senior technical responder for cloud security incidents, supporting containment, investigation, recovery and lessons learned.

• Work closely with PUK’s 24/7 SOC, digital forensics and incident response partners.

Governance, Compliance & Assurance

• Translate regulatory, industry and organisational requirements—including ISO/IEC 27001, Cyber Essentials Plus, DSPT, NCSC frameworks and UK GDPR—into effective technical controls and evidence.

• Maintain security engineering evidence to support audits, control testing, risk treatment and continuous improvement.

• Provide security assurance for new systems, suppliers and material changes, covering areas such as access, encryption, logging, resilience, data residency and exit arrangements.

• Contribute to security standards, hardening guidance, runbooks, architecture documentation and control reporting.

Technical Leadership & Collaboration

• Provide senior technical leadership, coaching and constructive challenge across Cyber, Platform, Engineering and Digital Workplace teams.

• Lead technical investigations and security improvement initiatives, communicating clear recommendations to technical and non-technical stakeholders.

• Work effectively with cloud, security and managed-service partners while retaining PUK ownership of security risk and control outcomes.

• Manage priorities independently, escalating risks early and maintaining clear technical and assurance documentation.

To succeed as our Senior Cloud Security Engineer, you will be:
A collaborative, pragmatic and technically credible security professional who combines strong…