Cloud Security Engineer in London

The Premier League is seeking a Cloud Security Engineer to lead the design, implementation, and operation of security controls across our cloud platforms. This role is responsible for securing Azure, AWS, and M365 environments, embedding secure-by-design principles into cloud architecture, and enhancing detection and response capabilities across the estate.

Our hybrid-working model allows you some variety on your place of work, offering you the chance to work from home on some days each week. Where possible, you will attend the office or site visits in line with our company policy. All staff liaise closely with their line manager to manage their time appropriately and according to their work and team requirements.

The role

• Cloud platform security
  • Deploy, and manage security controls across Azure, AWS, and Microsoft 365 environments.
  • Apply and maintain Azure Policy, RBAC, and Privileged Identity Management (PIM).
  • Secure cloud infrastructure using Microsoft Defender for Cloud and native platform capabilities.
• Detection & response engineering
  • Develop and improve cloud detection use cases within Microsoft Sentinel in collaboration with XDR provider.
  • Integrate cloud telemetry (Azure, AWS, SaaS) into central monitoring.
  • Support the Senior IS Analyst as the incident response lead in the investigation of cloud-related incidents as a subject matter expert.
• CSPM & exposure management
  • Own and operate all CSPM technology.
  • Identify and remediate cloud misconfigurations and exposure risks.
  • Work with Data Security to correlate infrastructure risk with data sensitivity.
• DevSecOps & secure architecture
  • Implement security controls infrastructure-as-code pipelines.
  • Enforce secure configuration standards for cloud environments.
  • Provide cloud security advice to DevOps on projects and cloud configuration.
• Tooling, automation & integration
  • Drive automation using PowerShell, CLI, Bicep, Terraform or equivalent.
  • Integrate security tooling across identity, cloud, and monitoring platforms.
  • Support integration of DSPM tooling into cloud environments and logging pipelines.
• Collaboration & governance
  • Work closely with IT TechOps and relevant third parties to maintain secure-by-design governance.
  • Collaborate with Data Security on applying data protection controls within cloud platforms.
  • Contribute to KPIs/KRIs and continuous improvement aligned to NIST CSF / ISO 27001.

Requirements for the role

• Ability to work independently and take initiative to drive outcomes.
• Previous experience in cloud infrastructure engineering.
• Strong experience with Microsoft Azure security tools and cloud configurations.
• Experience managing Microsoft 365 security and compliance solutions.
• Familiarity with AWS security principles and tooling (IAM, Security Hub, GuardDuty).
• Demonstratable use of Microsoft Defender XDR, Defender for Cloud, and Orca.
• Experience in scripting and automation using PowerShell, CLI, or infrastructure as code.
• Knowledge of SIEM/SOAR solutions (Microsoft Sentinel preferred).
• Experience responding to and analysing security incidents.
• Working knowledge of industry standards such as NIST CSF, ISO 27001, CIS Benchmarks.
• Comfortable communicating with both technical and non-technical audiences.
• Understanding of KPIs/KRIs in the context of cloud security monitoring.
• Qualified to or studying for certifications such as:

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect (SC-100)
• AWS Security Specialty
• CompTIA Security+
• GIAC Certified Cloud Security Automation (GCSA)

To apply please visit our careers page and apply with your CV and a cover letter. The closing date for applications is 17 May 2026.