Cloud & Data Security Engineer
As a Cloud & Data Security Engineer within the Cyber Engineering & Architecture function, you will own the definition, governance and continuous improvement of our customer's cloud and data security posture. This is a hands-on role, responsible for security standards, architectures and control governance across cloud platforms and data environments, reducing exposure risk and ensuring secure-by-design foundations as the organisation scales its cloud footprint. You will own cyber controls implementation and management using cloud-native and data security tooling. In addition to deep expertise in cloud and data security, this role requires collaboration with the wider Cyber Engineering & Defence teams, contributing to cross-domain security architecture reviews, supporting incident remediation and root-cause improvements when needed. A genuine interest in how AI adoption intersects with security is a strong plus, as the function's remit continues to grow into this space.
This is a hybrid role, so the successful candidate will be expected to attend the office in Dublin at least once a week.
Required Experience:
Experience in cloud security, security engineering, or infrastructure security roles
Hands-on experience securing cloud environments (AWS, Azure, or GCP) - IAM, network security, encryption, workload protection
Hands-on experience implementing data protection controls in Microsoft Purview or equivalent platforms
Experience delivering control governance, remediation workflows and evidence-based reporting for cloud and data security non-compliances
Experience collaborating with governance stakeholders (Data, Privacy, Legal, IT) on policy and control implementation
Strong understanding of data protection concepts (classification, least privilege, encryption, DLP, secure sharing) and how they apply in modern cloud and collaboration environments
Ability to translate risk into practical standards and secure-by-design blueprints for cloud and data use cases
Strong analytical skills to interpret signals and drive risk-based remediation priorities
Strong stakeholder management and communication skills, including the ability to explain control requirements to technical and non-technical audiences
An interest in AI security considerations (e.g., data exposure risks in AI tooling, secure adoption patterns) - training and support will be provided to build this out further
Key responsibilities & duties include:
Own cloud and data security policies, standards and secure-by-design patterns for infrastructure, information protection and safe AI adoption
Engineer, manage and govern cloud security and data protection controls (currently using Microsoft Purview)
Operate and improve Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM) practices, using insights to prioritise remediation
Define governance processes for cloud and data security non-compliances, exceptions and control gaps, coordinating remediation with technology and data owners
Partner with Data, Privacy, Legal and IT stakeholders to ensure controls and processes meet regulatory and internal requirements
Support incident response by providing SME input for cloud misconfigurations, data leakage events, or insider risk, and driving control improvements
Provide security architecture reviews and guidance for cloud, data platform and analytics initiatives to ensure secure data flows and protection by design
Contribute to security awareness and enablement for employees on safe handling of sensitive data and cloud resources
Work with Cyber Defence to ensure relevant cloud and data protection events and telemetry are available for monitoring and response
Support development of metrics and reporting on cloud and data security posture to track trends in maturity and controls effectiveness