Cloud & Data Security Engineer
HybridDublin, Leinster, Ireland
Job Summary
Own cloud and data security policies, standards, and secure-by-design patterns for infrastructure, information protection, and safe AI adoption. Engineer, manage, and govern cloud security and data protection controls using Microsoft Purview, while operating and improving Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM) practices to prioritize remediation. Define governance processes for non-compliances, exceptions, and control gaps, coordinating remediation with technology and data owners. Partner with Data, Privacy, Legal, and IT stakeholders to ensure controls meet regulatory and internal requirements, and support incident response by providing SME input for cloud misconfigurations, data leakage events, or insider risk. Provide security architecture reviews for cloud, data platform, and analytics initiatives to ensure secure data flows, contribute to security awareness for employees, and work with Cyber Defence to ensure relevant telemetry is available for monitoring. Support development of metrics and reporting on cloud and data security posture to track trends in maturity and controls effectiveness. Collaborate with the wider Cyber Engineering & Defence teams on cross-domain security architecture reviews and root-cause improvements.
Required Qualifications
- Experience in cloud security, security engineering, or infrastructure security roles
- Hands-on experience securing cloud environments (AWS, Azure, or GCP) - IAM, network security, encryption, workload protection
- Hands-on experience implementing data protection controls in Microsoft Purview or equivalent platforms
- Experience delivering control governance, remediation workflows and evidence-based reporting for cloud and data security non-compliances
- Experience collaborating with governance stakeholders (Data, Privacy, Legal, IT) on policy and control implementation
- Strong understanding of data protection concepts (classification, least privilege, encryption, DLP, secure sharing) and how they apply in modern cloud and collaboration environments
- Ability to translate risk into practical standards and secure-by-design blueprints for cloud and data use cases
- Strong analytical skills to interpret signals and drive risk-based remediation priorities
- Strong stakeholder management and communication skills, including the ability to explain control requirements to technical and non-technical audiences
- This is a hybrid role, so the successful candidate will be expected to attend the office in Dublin at least once a week
Desired Qualifications
- A genuine interest in how AI adoption intersects with security
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.