Description
Norton Rose Fulbright is seeking a Senior Information Security Engineer to join their Global Information Security team. The successful candidate will lead cloud and AI security assessments, define secure architecture patterns, improve posture and monitoring, investigate complex security issues, automate control validation, and provide clear risk-based recommendations to technical and senior stakeholders.
Key Responsibilities
- Cloud Platform, Identity & Workload Security: Define and continuously improve security controls and reference patterns across Azure, AWS, cloud-native services, SaaS platforms, containers, serverless workloads, virtual machines, storage, databases, APIs, and supporting network services.
- Cloud Posture, Exposure & Security Assurance: Own and improve cloud security posture and workload-protection processes, including platform onboarding, control baselining, finding validation, risk prioritization, remediation tracking, exception handling, and integration with governance processes.
- AI Security, Automation & Engineering: Define and apply security requirements for enterprise AI, generative AI, copilots, agents, machine-learning services, and AI-enabled SaaS solutions.
- Monitoring, Governance, Reporting & Leadership: Define security-telemetry and detection requirements for cloud and AI services, and work with monitoring teams to ensure relevant identity, administrative, data-access, workload, and application activity is available for investigation and response.
Key Objectives
- Ensure cloud platforms, cloud-native services, SaaS applications, and AI solutions are securely designed, configured, monitored, and continuously improved.
- Provide senior technical ownership and escalation support for cloud security posture, workload protection, identity, data protection, application security, and AI-related security risks.
- Advance the Firm’s cloud and AI security capabilities through reusable guardrails, automated assurance, reliable telemetry, actionable reporting, and supportable operational processes.
Skills and Experience Required
- At least 5 years of relevant experience in cloud security, security engineering, cloud architecture, DevSecOps, or a closely related technical discipline.
- Recent hands-on experience securing public-cloud environments such as Azure and GCP in a large or complex enterprise.
- Strong knowledge of cloud identity and access management, workload identities, privileged access, federation, conditional access, service principals, managed identities, and least-privilege design.