At a Glance
- Tasks: Evaluate and implement cloud security technologies while collaborating on innovative projects.
- Company: Join Hastings Direct, a leading digital insurance provider with a vibrant culture.
- Benefits: Enjoy flexible working, competitive salary, bonuses, and comprehensive health support.
- Other info: Dynamic work environment with excellent career growth and a focus on mental wellbeing.
- Why this job: Make a real impact in cloud security and drive innovation in a growing company.
- Qualifications: Experience in cloud security, particularly with Microsoft Azure, and strong problem-solving skills.
The predicted salary is between 63000 - 77000 £ per year.
Welcome to Hastings Direct. We’re a digital insurance provider with ambitious plans to become The Best and Biggest in the UK market. Over the past few years, we've made significant investments in our data and tech capabilities, particularly within our CIO function. Our CIO team is at the forefront of driving innovation and ensuring our technology infrastructure supports our ambitious goals.
As a Cloud Security Engineer, you will evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing on cloud-first and cloud-native technologies.
- Develop cloud security solutions by applying the principles of Security as Code using cloud automation tooling and adhering to industry best practices.
- Collaborate closely with Security Architects to define and own the cloud security strategy, ensuring a continuously updated and secure environment.
- Establish cloud security best practices and develop, construct, and evaluate cloud-native services that offer necessary guardrails for developers.
- Validate and ensure that cloud solutions meet published enterprise security standards, are properly governed, and delivered in accordance with established guidelines.
- Embrace agile working practices, collaborating with teams across engineering disciplines and strategic partners to release enterprise-class cloud services.
Qualifications:
- Azure Security Engineer, CCSP, CISSP, CCSK are highly desirable.
- Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services.
- Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements.
- In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles.
- Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.
- Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.
- Excellent problem-solving skills and the ability to analyse complex security issues and develop effective solutions.
- In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL.
- Familiarity with scripting toolsets and automation with Microsoft ARM, BICEP, PowerShell, Python.
- Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure.
- Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions.
- Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code.
We focus on getting it right for our colleagues, customers, company, and community. As one of our colleagues, you’ll be helping to drive our growth, so in return, we’ll give you all the support, training and development you need.
Reward:
- Salary - Attractive salary based on experience + car allowance (pay reviews also completed each year).
- Flexible Working - We champion a flexible and hybrid working approach.
- Competitive Bonus Scheme - All colleagues are eligible for our annual 4Cs performance bonus.
- Physical Wellbeing - We fund our colleagues to claim against everyday health care through our healthcare cash plan.
- Financial Wellbeing - Life assurance cover and income protection at no extra cost, pension contribution match up to 10%.
- Mental Wellbeing Programme - A range of support to help you keep yourself well.
- 27 days annual leave + bank holidays, with the option to buy or sell one of your contracted weeks.
Our 4Cs principles are simple: we believe by creating the right culture for our colleagues and giving them the right tools to do their job, we’ll deliver good outcomes for every customer, helping us to grow the company profitably and sustainably.
We welcome applications from all suitably skilled persons regardless of their gender, age, race, disability, ethnic background, religion/belief, sexual orientation, gender reassignment or marital/family status.
Please also note that we have a thorough referencing process, which includes credit and criminal record checks.
Bexhill Type: Full time
DevSecOps - Cloud Security Engineer in Bexhill-on-Sea employer: Hastings Direct
Hastings Direct is an exceptional employer that fosters a collaborative and innovative work culture, particularly within our Telematics Data Value team. We offer competitive benefits, continuous professional development opportunities, and a commitment to employee growth, all while being located in a vibrant area that encourages creativity and teamwork. Join us to make a meaningful impact on pricing strategies and customer outcomes in a supportive environment.
StudySmarter Expert Advice🤫
We think this is how you could land DevSecOps - Cloud Security Engineer in Bexhill-on-Sea
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Hastings Direct, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Hastings Direct
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Hastings Direct. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace DevSecOps - Cloud Security Engineer in Bexhill-on-Sea
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Hastings Direct insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Hastings Direct that you’re committed to staying ahead in the game.
How to prepare for a job interview at Hastings Direct
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Hastings Direct to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Hastings Direct.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
