{"id":4226355,"url":"https://alion.io/job/atreides-cloud-security-engineer-contract","title":"Cloud Security Engineer (Contract)","company":{"id":1968305,"name":"Atreides","domain":"atreides.io","url":"https://alion.io/company/atreides-io","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gloucester, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-13T05:27:24Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T13:53:01Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Company Overview: Atreides helps organisations turn large, complex, multimodal datasets into detailed geospatial data, that can be used for a wide range of use cases. At present, Atreides focuses on providing high-fidelity data that allows customers to make decisions quickly.\nWe are a fast-moving, high-performing start-up. We value having a diverse team and believe that inclusion helps us perform better. We trust our people to work independently, as we believe this leads to better results and greater job satisfaction. With a mission-driven mindset and an entrepreneurial spirit, we are building something new and helping to harness data on a massive scale to make the world safer, stronger and more prosperous.\nTeam Overview: Our mission systems team is made up of security engineers, cloud architects and a variety of other technologists, many of whom have served in the armed forces. Between us, we have experience in defence, operational intelligence, law enforcement, large multinational companies and cyber security operations. We obsess about designing products that will change the way governments, international companies and non-profit organisations protect themselves from external threats and hostile adversaries.\nPosition Overview: Atreides are seeking a motivated and proactive Cloud Security Engineer to join our dynamic and growing security team. Reporting to the Lead Security Architect, you will build, secure and operate zero-trust cloud environments, with a strong focus on Microsoft Azure and DevSecOps practices. This is a broad, hands-on engineering role suited to a platform security engineer or DevSecOps professional who enjoys working across the stack, from identity, Infrastructure-as-Code and CI/CD pipelines to detection, response and vulnerability management.\nResponsibilities:\nImplement and support security controls across Azure, Microsoft Entra ID and the wider Microsoft stack, including Microsoft Defender for Cloud, Microsoft Defender XDR and Azure Policy.\nApply zero-trust principles and harden infrastructure and applications against recognised standards (e.g. CIS Benchmarks), enforcing them through policy-as-code.\nSecure containerised workloads throughout their lifecycle, from image hardening and runtime configuration to isolation between services.\nBuild and run security gates in DevOps pipelines that scan Infrastructure-as-Code (Bicep/Terraform), dependencies, secrets and container images, and produce auditable evidence.\nDevelop security automation to improve efficiency, including policy enforcement, remediation and reporting, using scripting (PowerShell, Python) and Infrastructure-as-Code.\nReview designs and code early, challenge weaknesses, advise on fixes and feed security findings into change approval without slowing delivery.\nTriage vulnerability and misconfiguration findings, prioritise them by exposure and support owning teams through patching and remediation.\nTune Microsoft Sentinel detections, investigate alerts and support incident response, following and improving playbooks and preserving evidence in line with defined procedures.\nWrite and maintain security documentation, including control designs, hardening guides, SyOPs and runbooks, and provide evidence to support assurance activities.\nRequired Expertise:\nProven experience in dedicated security engineering roles, ideally in cloud-first environments, built on a strong foundation in infrastructure, network, software or DevOps engineering.\nHands-on experience securing cloud infrastructure and services in Microsoft Azure using native Azure security tooling, with working knowledge of vulnerability management, patching and endpoint protection.\nExperience with identity and access management in Microsoft Entra ID, including designing and managing Conditional Access policies, Privileged Identity Management (PIM) and role-based access control to enforce least privilege and strong authentication.\nStrong understanding of cloud network security, including segmentation, firewalls, WAFs and zero-trust network access (ZTNA), and of infrastructure hardening (e.g. CIS Benchmarks).\nPractical experience embedding security into development lifecycles and CI/CD pipelines, including design and code reviews and automated pipeline security scanning.\nProficiency in scripting and automation (PowerShell, Python) and Infrastructure-as-Code (Bicep, Terraform).\nKnowledge of securing cloud-native, microservice and containerised systems, including container orchestration platforms.\nSolid understanding of security principles, common attack techniques and frameworks (e.g. OWASP Top 10, MITRE ATT&CK) and the threat landscape.\nStrong delivery focus, able to prioritise effectively and deliver outcomes in a fast-paced environment with shifting demands.\nClear communicator, able to explain security risk to both technical and non-technical stakeholders and influence engineering teams.\nDesired Qualifications and Experience\nMicrosoft security certifications, such as SC-500, SC-300 or SC-200.\nIndustry-recognised cloud security certifications, such as GIAC GCSA or GPCS, or ISC2 CCSP.\nHands-on experience deploying and operating zero-trust network access (ZTNA) solutions.\nExperience with SIEM platforms (Microsoft Sentinel preferred), including tuning detections, triaging alerts and responding to threats using established runbooks and procedures.\nExperience producing security documentation and supporting assurance activities in regulated environments.\nApplication security experience, including threat modelling and application security testing (SAST/DAST).\nEligibility: You must have the right to work in the United Kingdom. Please note that we do not provide visa sponsorship.\nTeam Principles: At Atreides, we believe that teams work best when they:\nRemain curious and passionate in all aspects of our work\nPromote clear, direct, and transparent communication\nEmbrace the 'measure twice, cut once' philosophy\nValue and encourage diverse ideas and technologies\nLead with empathy in all interactions \nCompensation and Benefits\nCompetitive salary \nFlexible hybrid work environment\nWhile meeting all of these criteria would be ideal, we understand that some candidates may meet most, but not all. If you're passionate, curious and ready to \"work smart and get things done,\" we'd love to hear from you.","description_format":"text","description_chars":6327,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Decision Intelligence","Defense AI"],"lifecycle":[{"event":"open","at":"2026-11-13T08:02:59Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:4","win:early"],"computed_at":"2026-11-13T18:49:45Z"},"pay":null,"html_url":"https://alion.io/job/atreides-cloud-security-engineer-contract","json_url":"https://alion.io/job/atreides-cloud-security-engineer-contract.json","meta":{"generated_at":"2026-11-13T18:49:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37618,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1968305},"rest":"https://alion.io/mcp/rest/get_company?id=1968305"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fatreides-cloud-security-engineer-contract"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fatreides-cloud-security-engineer-contract"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fatreides-cloud-security-engineer-contract"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/atreides-cloud-security-engineer-contract\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fatreides-cloud-security-engineer-contract"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4226355}},{"tool":"search_jobs","arguments":{"company":"atreides.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4226355},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}