# Senior Information Security Engineer

**Company**: Norton Rose Fulbright
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Consulting

**Apply**: https://nrf.wd3.myworkdayjobs.com/en-US/External/job/London-United-Kingdom/Senior-Information-Cloud-Security-Engineer_R-4426-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_0842a83e-79a

## Description

Norton Rose Fulbright is seeking a Senior Information Security Engineer to join their Global Information Security team. The successful candidate will lead cloud and AI security assessments, define secure architecture patterns, improve posture and monitoring, investigate complex security issues, automate control validation, and provide clear risk-based recommendations to technical and senior stakeholders.

**Key Responsibilities**

- Cloud Platform, Identity & Workload Security: Define and continuously improve security controls and reference patterns across Azure, AWS, cloud-native services, SaaS platforms, containers, serverless workloads, virtual machines, storage, databases, APIs, and supporting network services.

- Cloud Posture, Exposure & Security Assurance: Own and improve cloud security posture and workload-protection processes, including platform onboarding, control baselining, finding validation, risk prioritization, remediation tracking, exception handling, and integration with governance processes.

- AI Security, Automation & Engineering: Define and apply security requirements for enterprise AI, generative AI, copilots, agents, machine-learning services, and AI-enabled SaaS solutions.

- Monitoring, Governance, Reporting & Leadership: Define security-telemetry and detection requirements for cloud and AI services, and work with monitoring teams to ensure relevant identity, administrative, data-access, workload, and application activity is available for investigation and response.

**Key Objectives**

- Ensure cloud platforms, cloud-native services, SaaS applications, and AI solutions are securely designed, configured, monitored, and continuously improved.

- Provide senior technical ownership and escalation support for cloud security posture, workload protection, identity, data protection, application security, and AI-related security risks.

- Advance the Firm’s cloud and AI security capabilities through reusable guardrails, automated assurance, reliable telemetry, actionable reporting, and supportable operational processes.

**Skills and Experience Required**

- At least 5 years of relevant experience in cloud security, security engineering, cloud architecture, DevSecOps, or a closely related technical discipline.

- Recent hands-on experience securing public-cloud environments such as Azure and GCP in a large or complex enterprise.

- Strong knowledge of cloud identity and access management, workload identities, privileged access, federation, conditional access, service principals, managed identities, and least-privilege design.

## Skills

### Required
- cloud security
- security engineering
- cloud architecture
- DevSecOps
- Azure
- GCP
- cloud identity and access management
- workload identities
- privileged access
- federation
- conditional access
- service principals
- managed identities
- least-privilege design

### Nice to have
- multi-cloud environments
- cloud-native security tooling
- CI/CD security
- infrastructure-as-code scanning
- container security
- Kubernetes security
- enterprise AI governance
- AI red teaming
- AI threat modelling
- secure AI architecture
- AI security testing

---

Source: [Apply at nrf.wd3.myworkdayjobs.com](https://nrf.wd3.myworkdayjobs.com/en-US/External/job/London-United-Kingdom/Senior-Information-Cloud-Security-Engineer_R-4426-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)