Cloud Security Engineer

Base pay range

Make The Connection.

Vix Technology, a global leader in automatic fare collection, transit information, and transit analytics solutions, is seeking a highly skilled and experienced Field Engineer. With a presence in over 200 city and regional transport authorities worldwide, Vix has been at the forefront of transforming fare collection for more than 35 years. At Vix, we are committed to solving problems and delivering innovative solutions that are revolutionising the world of public transit.

As a global organisation, we recognise and value the distinct strengths that individual diversity brings to our overall success. We invite you to share your perspectives, cultural backgrounds, and innovative ideas; we look forward to your contributions.

Join the Vix team as an experienced Cloud Security Engineer! This on‑site position in Manchester involves collaborating with our Cloud Operations team and the Security team to maintain robust security protocols. You'll play a crucial role in guiding our technical teams to meet security standards, successfully passing security audits, and safeguarding both company and customer data. As the first point of contact for security incidents, your expertise will be essential in keeping our systems secure.

We regret that this position is only available for UK citizens/Residents with indefinite leave to remain in the UK, with current full time work rights for the United Kingdom, currently residing in the UK. The position is located in Manchester.

• Evaluate and strengthen our overall security posture by performing continuous audits, risk assessments, threat modelling, and architecture reviews to ensure effective controls and adherence to regulatory standards.
• Consistently monitor and assess cloud environments for vulnerabilities and misconfigurations utilising tools like AWS Inspector, Guard Duty, and Security Hub, complemented by regular vulnerability scanning and penetration testing.
• Design, implement, and automate enterprise‑level security systems and controls
  —including IAM, SIEM, DLP, firewalls, endpoint protection, and cloud‑native guardrails—to safeguard assets across both cloud and hybrid environments.
• Actively respond to security events and incidents by leading investigations, coordinating remediation efforts, and driving improvements after incidents.
• Maintain ongoing compliance with relevant security and data privacy standards (e.g., GDPR, ISO 27001, NIST, CCPA) through diligent documentation, effective policies, and audit preparedness.
• Work collaboratively with global IT, Cloud, and Security Operations Centre teams to protect company systems and efficiently tackle any emerging challenges.
• Create and present clear, actionable security reports for internal stakeholders and external clients, aiding in assurance activities and fulfilling contractual obligations.
• Keep abreast of emerging threats, tools, and technologies
  , and propose innovative strategies to enhance our security frameworks continuously.
• Advocate secure‑by‑design principles
  , integrating security best practices into system architecture, development processes, and operational workflows.

• 3‑5 years of experience in Information Security and Cloud Security Engineering
  , with proven expertise in securing AWS environments (IAM, networking, storage, and compute).
• Hands‑on experience with networking, infrastructure, and container security (EKS, ECS, Kubernetes) across both cloud and on‑premises environments.
• Strong understanding of security principles, technologies, and industry best practices
  , including vulnerability and incident management.
• Practical experience with security monitoring and protection tools such as Firewalls, IDS/IPS, XDR, SIEM, CNAPP, and log collection platforms (e.g., Crowd Strike, Lacework).
• Experience in designing and implementing Identity and Access Management (IAM) solutions and maintaining secure authentication practices.
• Proficiency with Windows and Linux systems
  , as well as network scanning and diagnostic tools (e.g., Wireshark, IP scanner).
• A solid understanding of Public Key Infrastructure (PKI) and encryption fundamentals.
• Excellent…