Information Security Cloud Specialist

Freshfields Bruckhaus Deringer; Manchester; On-site; GBP 60,000 - 85,000; Full time

Job summary

A global law firm based in Manchester is seeking an experienced Information Security Cloud Specialist. The role focuses on enhancing the security of Azure IaaS and Google Cloud Platform environments. The ideal candidate will have over 5 years of cloud security experience, excellent skills in Terraform and DevSecOps, and the ability to communicate complex security issues clearly. Join a dynamic team dedicated to innovation in cloud security practices.

Qualifications

• 5+ years experience in cloud security with strong focus on Azure IaaS.
• Proficiency in Terraform and infrastructure-as-code best practices.
• Experience managing compute, network and storage resources in cloud environments.

Responsibilities

• Assess security configurations of Azure IaaS and GCP environments.
• Design and manage secure Azure cloud infrastructure.
• Collaborate with teams to enhance continuous improvement in cloud security.

Skills

Cloud security expertise

Azure IaaS experience

Terraform proficiency

DevSecOps knowledge

Problem-solving skills

Education

Relevant cloud/security certifications

Tools

Azure Defender

Google Cloud Platform tools

Job description

Information Security Cloud Specialist page is loaded## Information Security Cloud Specialistlocations: Manchestertime type: Full timeposted on: Posted Yesterdayjob requisition id: R-07474**Role Summary**We are seeking a Cloud Security Specialist with hands‑on experience across Azure, M365 and preferably Google Cloud Platform (GCP). The role focuses on assessing and improving cloud security configurations and advising on best practices across Azure IaaS and GCP environments. You will bring a strong engineering background in managing compute, network and storage resources in cloud and hybrid environments, along with extensive experience of Terraform, Azure Defender, Conditional Access and DevSecOps.**Key responsibilities and deliverables*** Assess the security configuration of Azure IaaS and GCP environments (infrastructure, containers and DevOps pipelines) and provide recommendations based on industry best practice and emerging threats.* Design, implement and manage secure Azure cloud infrastructure (e.g. virtual networks, VMs, storage, identity services) and provide cloud‑security SME support to Cyber Incident Response when required.* Administer and enhance Azure security across IaaS, containers (e.g. AKS) and DevOps pipelines; implement and review security controls for cloud‑native applications and services.* Review Terraform‑based infrastructure‑as‑code to identify and mitigate security risks; advise on securing automated provisioning processes.* Evaluate and optimise Azure Defender and other monitoring tools (including in GCP), assess and refine Conditional Access/IAM strategies, embed security into DevSecOps/CI‑CD pipelines, and ensure cloud environments meet compliance and governance requirements.* Collaborate with cloud, DevOps, Networks and development teams to align security with operational goals, and promote continuous improvement and innovation in cloud security.**Key requirements**Essential* 5+ years’ experience in cloud security, with strong focus on Azure IaaS and exposure to (preferably) Google Cloud.* Hands‑on experience administering Azure security environments, including IaaS, containers (e.g. AKS) and DevOps pipelines.* Strong background in administering compute, network and storage resources in cloud and hybrid environments.* Proficiency with Terraform and infrastructure‑as‑code best practices, including the ability to review scripts for security issues.* Extensive experience with Azure security services and tooling (e.g. Defender, Conditional Access), strong problem‑solving skills, and the ability to communicate security issues clearly to technical and non‑technical stakeholders.Desirable* Relevant cloud/security certifications (e.g. Azure Security Engineer, Google Professional Cloud Security Engineer).* Experience contributing cloud security expertise to incident response and investigations.* Experience in complex or regulated enterprise environments with formal governance frameworks.* Demonstrated ability to manage through change and drive improvements in security processes and tooling.* Experience working in a consulting or advisory capacity, building strong relationships across cross‑functional teams.**Inclusion**Freshfields is an equal opportunities employer and all applications received by the firm will be considered on the basis of their merit alone. We welcome applications from all suitably qualified individuals regardless of background. All offers of employment will be conditional on the candidate having/securing the right to work in the UK in the role in question and providing the firm with evidence of that right (as required by the Immigration, Asylum and Nationality Act 2006) prior to employment commencing.Freshfields is a Ban the Box employer. We ask applicants to disclose criminal convictions only if and when a conditional job offer is made. A conviction does not automatically lead to withdrawal of the offer: we make decisions on a case-by-case basis and take a number of relevant factors into account (e.g. the role you are applying for and the circumstances of the offence). You would have the opportunity to discuss the matter with us before we make a decision.Freshfields is a global law firm with a long-standing track record of successfully supporting the world’s leading national and multinational corporations, financial institutions, and governments on ground-breaking and business critical mandates.At Freshfields we seek to create a better future for our clients, our people and the communities in which we work. Our global teams bring together individuals with different experiences, skills and strengths in a culture where we support all to belong, engage and excel.