Want to know if this job is worth applying to?
Kirkwall, Alba / Scotland, United Kingdom
Remote only
POSITION SUMMARY
The Cloud Security Engineer protects Gladstone's cloud platforms and services through secure design, configuration, monitoring, automation and evidence-led remediation. The role works across Azure, Kubernetes, networks, identity, workloads, data and delivery pipelines, and supports the safe adoption of AI-enabled systems and operational tooling.
AI-ENABLED WORKING
AI-enabled working is a core expectation of this role. The role holder will use approved AI tools and automation to improve quality, speed, insight and consistency; validate outputs before acting on them; protect customer, employee and company data; and share effective practices with colleagues. Performance will be assessed through outcomes such as quality, reliability, cycle time, risk control and knowledge transfer - not simply the volume of AI-generated output or frequency of tool use.
KEY RESPONSIBILITIES
Cloud Security Engineering
• Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines.
• Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production.
• Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation where appropriate.
• Support secrets, key, certificate, privileged-access and service-account lifecycle management.
Detection, Response and Vulnerability Management
• Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures.
• Prioritise remediation using exploitability, exposure, business impact and compensating controls rather than severity labels alone.
• Support security incident response, evidence preservation, root-cause analysis and completion of corrective actions.
• Maintain clear security findings, owners, due dates, exceptions and risk acceptance records.
AI and Application Security
• Threat model AI-enabled services and operational agents, including data leakage, prompt injection, over-permission, unsafe actions, supplier risk and inadequate human oversight.
• Use approved AI tools to support security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data.
• Work with R&D and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns.
• Define and test guardrails for AI access to production systems, credentials, logs and customer information.
Compliance and Security Culture
• Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity.
• Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working.
• Report material risks and trends clearly to the Cloud Operations Manager, Compliance Manager and relevant owners.
EXPERIENCE, KNOWLEDGE AND SKILLS
Essential
• Hands-on experience securing Azure or another major cloud platform in a production environment.
• Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response.
• Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation.
• Experience with scripting, policy-as-code, infrastructure automation or security automation.
• Understanding of secure development and deployment practices, including secrets and pipeline security.
• Clear documentation and communication of technical risk to different audiences.
Desirable
• Azure security, Kubernetes security or recognised cyber-security certification.
• Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments.
• Experience threat modelling AI-enabled systems, APIs or agentic automation.
PERSONAL ATTRIBUTES
• High ownership, sound judgment and a bias toward solving problems rather than moving them between teams.
• Curious and adaptable, with a practical commitment to continuous learning and responsible AI adoption.
• Systematic, evidence-led problem solving and attention to detail.
• Clear communication with both technical and non-technical colleagues.
• Collaborative working style and willingness to share knowledge, review work and support others.
Jonas Software is a leading provider of enterprise management software solutions, serving a wide range of vertical markets including hospitality, healthcare, construction, education, personal care, fitness, leisure, moving and legal services, to name a few. Within these markets, Jonas is comprised of over 65 distinct brands, each a respected leader in its domain.
Jonas’ vision is to be the branded global leader across these verticals and to be recognized by customers and industry stakeholders as the trusted provider of “Software for Life.” We are committed to technology, product innovation, quality, and exceptional customer service.
Jonas Software supports over 60,000 customers in more than 30 countries. We employ over 6,000 skilled professionals, including industry experts and technology specialists. Across our broader network, we support a global workforce of more than 30,000 employees.
Headquartered in Canada, Jonas Software has a global footprint with offices around the world. We’re a 100% owned subsidiary of Constellation Software Inc., based in Toronto, publicly listed on the TSX (CSU.TO), and a member of the S&P/TSX 60 Index.