Cloud Security Engineer

BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World.
To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!

In this role, passionate about cloud security within the Security Team, you will implement, operate, and improve security controls for AWS and Azure environments. Working under the mentorship of the Cloud Security Architect, you will translate cloud security architectures and standards into practical implementations that protect cloud infrastructure, platforms, and workloads.

You will work closely with teams responsible for cloud infrastructure, DevOps, and security operations. You will ensure cloud services are securely configured, supervised, and maintained according to enterprise security requirements.   Your role will focus on translating security designs and policies into operational configurations, supporting cloud security monitoring and vulnerability management, and chipping in to continuous improvement by applying standard processes and staying informed on emerging cloud threats and technologies.

Your key responsibilities will include:

• Implement and maintain security controls across Amazon Web Services and Microsoft Azure platforms  
• Configure identity and access controls, roles, and permissions for cloud workloads
• Implement encryption, key management, and secrets management solutions
• Secure storage, compute, serverless, and platform services
• Support secure cloud onboarding and account/subscription configuration
• Implement and lead cloud security posture management controls
• Supervise and remediate misconfigurations and policy violations
• Maintain secure configuration baselines and hardening standards

What are we looking for?

Technical Experience

• Hands-on experience securing AWS and/or Azure environments
• Experience with IAM, cloud networking, and infrastructure security
• Understanding of cloud-native services, containers, and serverless security
• Experience with infrastructure-as-code and DevOps environments
• Knowledge of cryptographic methods, key administration, and secure cloud configurations  
  
  

Frameworks & Practices

• Familiarity with CIS benchmarks, cloud security protocols, and secure configuration standards
• Understanding of shared responsibility models and basic compliance requirements
  
  

Soft Skills

• Collaboration with cloud platform and engineering teams
• Ability to implement architectural mentorship optimally
• Strong skills in fixing and operational rigor  
• Clear documentation and communication skills
• Continuous learning approach
  
  

Preferred Qualifications

• Bachelor’s degree in a relevant field
• AWS, Azure or CCSP security certifications
• 3-5 years security experience in enterprise cloud environments
• Exposure to regulated or multi-region deployments

What we offer you?

• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes

WHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.

Collaboration, inclusion and partnership underpin everything we do here at BAT. We are looking forward to enabling every individual to thrive, regardless of gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, veteran status, perspectives and thinking styles. We know that embracing talent from all backgrounds is what makes us stronger and best prepared to meet our business goals.

We see the career breaks as opportunities not obstacles. Through The Global Returners program, we support professionals looking to restart their careers after an extended absence from the workforce (e.g. time out caring for family, parental leave, national service, sabbatical and/or starting an own venture).

Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.

If you require any reasonable adjustments or accommodations to help you perform at your best during the recruitment process, you are encouraged to notify us. We are fully committed to support you by making appropriate arrangements for you to demonstrate your full potential.