Cyber Security Remediation Engineer

We are seeking experienced Cyber Security Remediation Engineers to support a large-scale passenger processing technology portfolio. These roles are part of a targeted security programme focused on reducing vulnerability exposure and remediating identified risks across cloud environments.

The engineers will work through an existing backlog of security findings, partnering with platform, infrastructure and application teams to drive remediation activity across either Azure public cloud environments.

Role & responsibilities

• Work through a prioritized backlog of vulnerabilities, misconfigurations and risk items originating from security tooling, audits and assessments

• Perform hands-on remediation across:

• Identity & access management (IAM / RBAC)

• Network security and segmentation

• Cloud configuration and posture management

• Logging, monitoring and alerting gaps

• Collaborate with engineering, DevOps and platform teams to implement fixes safely and efficiently

• Support vulnerability management workflows, including validation, remediation tracking and closure

• Ensure remediation activities align with change management, governance and operational controls

• Contribute to improving cloud security baselines and reducing recurring security issues

• Provide clear documentation of remediation actions and residual risks where applicable

Preferred candidate profile

• Proven experience in cyber security remediation or cloud security engineering
• Strong understanding of vulnerability management, risk remediation and security controls
• Experience working in regulated or mission-critical environments (transport, aviation, infrastructure, or similar highly available systems)
• Strong understanding of Microsoft Defender for Cloud and Azure security posture management
• Azure RBAC and Entra ID
• Familiarity with Azure network security and resource protection controls
• Experience remediating findings using native Azure security tooling and/or SIEM/CSPM platforms
• Experience addressing security misconfigurations, vulnerabilities, and compliance findings identified through security tooling
• Ability to validate remediation outcomes and support risk closure activities
• Working knowledge of Azure logging, monitoring, and threat detection capabilities
• Ability to work independently on remediation tasks while coordinating with multiple teams
• Experience working in project-based or programme-driven security initiatives
• Strong communication skills, with the ability to explain security risks and remediation actions clearly
• Familiarity with infrastructure-as-code and automated remediation approaches is beneficial