{"id":2780912,"url":"https://alion.io/job/norton-rose-fulbright-senior-information-cloud-security-engineer","title":"Senior Information Cloud Security Engineer","company":{"id":1756075,"name":"Norton Rose Fulbright","domain":"nortonrosefulbright.com","url":"https://alion.io/company/nortonrosefulbright-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":39,"ghost_share":0,"stale_share":0.974,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom","Newcastle upon Tyne, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":88000,"max_usd":161000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"CI/CD","optional":true},{"name":"Kubernetes","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-10-16T00:00:00Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-21T07:55:06Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Practice Group / Department:\nIT Security - Operations and RiskJob Description\nNorton Rose Fulbright is a global law firm with more than 3,000 lawyers advising clients across locations in the United States, Europe, Canada, Latin America, Asia, Australia, Africa and the Middle East. We provide a full scope of legal services to the world’s preeminent corporations and financial institutions.\nOur vision is to be a world class business, profitable, ambitious, cooperative and considerate, supporting our clients and people through our global business principles of Quality, Unity and Integrity.\nWe apply our business principles to all our activities world-wide. They describe our culture and personality both internally and externally, the way we work and what we stand for.\nThe Role\nThe Senior Information Security Engineer is a senior technical role within the Global Information Security function, focused on securing cloud platforms, cloud-native services, artificial intelligence solutions, and the identities, data, applications, and integrations that support them. The role works across Azure, GCP, SaaS, AI platforms, and enterprise technology to translate security requirements into practical, scalable, and supportable controls.\nThe role combines hands-on cloud security engineering with technical governance. The successful candidate will lead cloud and AI security assessments, define secure architecture patterns, improve posture and monitoring, investigate complex security issues, automate control validation, and provide clear risk-based recommendations to technical and senior stakeholders.\nThe Team\nThe Global Information Security team delivers strategic and operational improvements that strengthen the Firm’s security posture. The team works across regions and technology functions to define security standards, improve visibility, manage cyber risk, and ensure that cloud and enterprise services are securely designed, implemented, monitored, and continuously improved.\nKey Responsibilities\nCloud Platform, Identity & Workload Security\nDefine and continuously improve security controls and reference patterns across Azure, AWS, cloud-native services, SaaS platforms, containers, serverless workloads, virtual machines, storage, databases, APIs, and supporting network services.\nAssess cloud architectures and configurations for identity, network exposure, encryption, secrets management, key management, logging, resilience, data protection, and secure administrative access.\nLead technical investigations involving cloud identities, service principals, managed identities, workload identities, API permissions, privileged access, exposed services, misconfiguration, and suspicious cloud activity.\nEmbed security into cloud engineering and delivery practices by working with architects, platform teams, developers, and service owners to apply secure-by-design guardrails throughout the technology lifecycle.\nCloud Posture, Exposure & Security Assurance\nOwn and improve cloud security posture and workload-protection processes, including platform onboarding, control baselining, finding validation, risk prioritization, remediation tracking, exception handling, and integration with governance processes.\nSupport vulnerability and exposure management across internet-facing assets, cloud workloads, applications, containers, and SaaS services using available posture, vulnerability, attack-surface, and threat data.\nPerform security reviews of cloud solutions, integrations, APIs, infrastructure-as-code, and technology changes, with emphasis on least privilege, segmentation, encryption, logging, auditability, secure configuration, and operational ownership.\nAI Security, Automation & Engineering\nDefine and apply security requirements for enterprise AI, generative AI, copilots, agents, machine-learning services, and AI-enabled SaaS solutions, including data access, prompt and response handling, model or service permissions, identity, logging, retention, and human oversight.\nAssess AI-specific threats and control gaps, including prompt injection, sensitive-data leakage, insecure agent actions, excessive permissions, unapproved integrations, third-party model risk, and inadequate monitoring; translate findings into proportionate safeguards.\nBuild automation and proof-of-concept solutions using PowerShell, Python, KQL, APIs, policy-as-code, infrastructure-as-code, cloud-native functions, and workflow technologies, and mature successful concepts into governed, supportable services.\nMonitoring, Governance, Reporting & Leadership\nDefine security-telemetry and detection requirements for cloud and AI services, and work with monitoring teams to ensure relevant identity, administrative, data-access, workload, and application activity is available for investigation and response.\nDevelop and maintain cloud and AI security standards, architecture patterns, technical procedures, assessment methodologies, runbooks, and control-validation processes.\nProvide technical input to security incidents, threat-led investigations, assurance reviews, audits, client inquiries, and risk assessments involving cloud or AI services.\nCreate meaningful KPIs, dashboards, technical reports, and executive-ready summaries that communicate cloud and AI risk exposure, control effectiveness, remediation progress, and operational trends.\nProvide technical leadership, coaching, and knowledge transfer; act as an escalation point for complex cloud and AI security issues across global technology teams.\nMaintain awareness of emerging cloud capabilities, AI attack techniques, regulatory expectations, and industry good practice; recommend proportionate improvements and manage assigned initiatives through design, implementation, documentation, handover, and operational acceptance.\nKey Objectives\nEnsure cloud platforms, cloud-native services, SaaS applications, and AI solutions are securely designed, configured, monitored, and continuously improved.\nProvide senior technical ownership and escalation support for cloud security posture, workload protection, identity, data protection, application security, and AI-related security risks.\nAdvance the Firm’s cloud and AI security capabilities through reusable guardrails, automated assurance, reliable telemetry, actionable reporting, and supportable operational processes.\nContribute to technical, procedural, and governance improvements aligned with the Information Security Management System (ISMS), cloud control frameworks, and the Firm’s AI governance requirements.\nSkills and Experience Required\nEssential\nAt least 5 years of relevant experience in cloud security, security engineering, cloud architecture, DevSecOps, or a closely related technical discipline.\nRecent hands-on experience securing public-cloud environments such as Azure and GCP in a large or complex enterprise.\nStrong knowledge of cloud identity and access management, workload identities, privileged access, federation, conditional access, service principals, managed identities, and least-privilege design.\nDemonstrable experience assessing cloud architectures and configurations across compute, storage, databases, networking, containers, serverless technologies, APIs, key management, secrets management, and logging.\nPractical experience with cloud security posture management, cloud workload protection, vulnerability management, attack-surface management, and risk-based remediation.\nExperience defining or evaluating security controls for generative AI, enterprise copilots, AI agents, machine-learning platforms, or AI-enabled SaaS solutions.\nUnderstanding of AI-specific security risks, including prompt injection, sensitive-data exposure, insecure tool or agent actions, excessive permissions, third-party model risk, and insufficient monitoring or governance.\nAbility to automate security processes and control validation using PowerShell, Python, KQL, APIs, policy-as-code, infrastructure-as-code, cloud-native functions, or comparable technologies.\nExperience reviewing cloud solution designs and integrations for authentication, authorization, network controls, encryption, data protection, logging, monitoring, resilience, and secure operational ownership.\nAbility to troubleshoot complex technical issues across cloud, identity, application, API, network, data, and security-monitoring layers.\nExperience producing clear architecture guidance, technical standards, operational procedures, dashboards, risk assessments, and reports for technical and non-technical audiences.\nWorking knowledge of relevant frameworks and practices such as ISO 27001, NIST, CIS Benchmarks, cloud security control frameworks, secure development practices, and emerging AI risk-management guidance.\nStrong stakeholder-management and communication skills, with the ability to challenge constructively and translate complex cloud and AI security issues into business risk.\nAbility to work independently, manage competing priorities, and lead defined initiatives through to completion in a global, matrixed environment.\nDesirable\nRelevant cloud security, cloud architecture, DevSecOps, or AI security certifications.\nExperience with multi-cloud environments, cloud-native security tooling, CI/CD security, infrastructure-as-code scanning, container security, or Kubernetes security.\nExperience with enterprise AI governance, AI red teaming, AI threat modelling, secure AI architecture, or AI security testing.\nExperience working in a regulated professional-services environment with strong confidentiality, data-protection, and client-security requirements.\nExperience transitioning proofs of concept into production services using formal architecture, change-management, documentation, and operational-acceptance processes.\n#LI-JC1 #LI-Hybrid\nDiversity, Equity and Inclusion\nTo attract the best people, we strive to create a diverse and inclusive environment where everyone can bring their whole selves to work, have a sense of belonging, and realize their full career potential. \nOur new enabled work model allows our people to have more flexibility in the way they choose to work from both the office and a remote location, while continuing to deliver the highest standards of service. We offer a range of family friendly and inclusive employment policies and provide access to programmes and services aimed at nurturing our people’s health and overall wellbeing. Find more about Diversity, Equity and Inclusion here.\nWe are proud to be an equal opportunities employer and encourage applications from individuals who can complement our existing teams. We strive to create an inclusive and accessible recruitment process for all candidates. If you require any tailored adjustments or accommodations, please let us know here.","description_format":"text","description_chars":10756,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Legal Services"],"lifecycle":[{"event":"open","at":"2026-10-17T12:52:25Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Graduate Trainee, Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Graduate Trainee; Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-23T06:21:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.598,"p_room":1,"age_days":7,"expected_fill_days":28,"reasons":["conf:45","stale_co","win:early","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/norton-rose-fulbright-senior-information-cloud-security-engineer","json_url":"https://alion.io/job/norton-rose-fulbright-senior-information-cloud-security-engineer.json","meta":{"generated_at":"2026-10-23T21:56:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4371,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1756075},"rest":"https://alion.io/mcp/rest/get_company?id=1756075"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnorton-rose-fulbright-senior-information-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnorton-rose-fulbright-senior-information-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnorton-rose-fulbright-senior-information-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/norton-rose-fulbright-senior-information-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnorton-rose-fulbright-senior-information-cloud-security-engineer"}]}