Security Cloud Consultant (Azure, AWS, AI) - #2166385

Secure applications, APIs and AI platforms, including Azure OpenAI and Microsoft Copilot, across Azure and AWS, and help shape safe AI adoption.

Contract: 6 months

Location: Coventry, West Midlands, UK

Working pattern: Hybrid, 2-3 days onsite but open for discussion.

The Project

The client is strengthening the security, governance and resilience of its applications, cloud-native services, APIs and AI platforms. You will work with development, cloud, infrastructure and cyber security teams across application security, DevSecOps and AI risk management.

Key Responsibilities

- Configure and optimise Azure WAF and AWS WAF policies

- Assess web applications, APIs and cloud-native services

- Secure Azure Logic Apps and Function Apps

- Strengthen API authentication and access management

- Implement Azure Key Vault and AWS KMS secrets and key management

- Embed security in CI/CD pipelines and DevSecOps processes

- Contribute to threat modelling, architecture reviews and risk assessments

- Implement AI security governance, risk and compliance controls

- Assess AI platforms, including Azure OpenAI and Microsoft Copilot

- Support data protection, AI abuse monitoring and prompt injection mitigation

Technical Skills

Essential

- Application security, cloud security or cyber security engineering

- OWASP Top 10 vulnerabilities and mitigation

- API authentication, authorisation, encryption and monitoring

- WAF technologies, ideally Azure WAF and/or AWS WAF

- Azure and AWS cloud-native security services

- Azure Key Vault, AWS KMS, Thales CipherTrust or similar

- SSDLC, CI/CD security and DevSecOps

- Security reviews, threat modelling and risk assessments

- AI/LLM security risks, governance frameworks and data protection

- Stakeholder management, communication and documentation

Desirable

- Azure Logic Apps, Azure Function Apps and serverless security

- Azure OpenAI, Microsoft Copilot, Anthropic Claude or equivalent

- AI threat modelling and prompt injection mitigation

- SAST, DAST, SCA or API security testing tools

- Security monitoring, SIEM and automated response

- Zero Trust for applications and APIs

- Data privacy, regulatory compliance and information protection

- AZ-500, SC-100, SC-300, CISSP, CCSP, CSSLP, CEH or equivalent

Eligibility and Contact

UK right-to-work candidates only, including eligible dependant visa holders and those with ILR. Unfortunately, visa sponsorship or Skilled Worker visa support is not available.

To apply or find out more, contact [email protected]