Could Security Engineer (AWS or Azure) Tesco Mobile

Shape the Future of Cloud Security at Tesco Mobile

Tesco Mobile is the UK’s largest virtual mobile network — powered by O2 and backed by the strength of Tesco. We’re known for doing things differently: award‑winning customer satisfaction, a collaborative culture, and innovative digital experiences for over five million customers.

As a Cloud Security Engineer within the Run & Operate Chapter, you’ll join our DevSecOps Squad, working alongside DevOps engineers, platform specialists, and the Cyber Security Team. Your mission: to secure and optimise our cloud platforms across Azure and AWS, embedding robust security practices into everything we build and operate.

This is a hands-on role where you’ll define cloud security standards, drive improvements, validate infrastructure changes, and strengthen our detection and response capabilities. Your work will directly influence how we protect our services, customers, and engineering systems.

You will be responsible for:

You will play a key role in securing and maturing Tesco Mobile’s cloud environments (Azure and AWS):

Define, maintain, and evolve cloud infrastructure security standards across AWS and Azure
Act as a subject-matter expert on cloud and infrastructure security
Lead and deliver cloud security improvement initiatives and posture management work

Operational Cloud Security

Use services like Azure Security Center/Security Hub and AWS Security Hub to monitor and enhance posture
Identify threats, risks, and misconfigurations — and implement effective mitigation strategies
Validate infrastructure changes to ensure they meet security and compliance requirements

Collaboration & Strategy

Work closely with the Cyber Security Team to align on strategy, controls, and company-wide initiatives
Communicate risk and security improvements in a clear, business-focused way
Support containerised environments and cloud-native workloads where relevant

You will need:

Proven experience in cloud security operations with either Azure or AWS (ideally both)
Hands-on experience with cloud security monitoring and posture management tools
e.g., Azure Security Center, Azure Defender, AWS Security Hub

Strong understanding of cloud governance, threat identification, and risk mitigation
Experience integrating security controls into CI/CD pipelines
Infrastructure as Code expertise (Terraform preferred)
Logging/SIEM experience (e.g., Splunk, Sentinel, CloudWatch Logs)
Automation skills using PowerShell, Azure CLI, AWS CLI, and/or Python
Understanding of SAST, secure coding, and DevSecOps practices
Collaborative mindset and eagerness to learn

Nice to have

GitHub & GitHub Actions
Experience with both AWS and Azure
Exposure to Docker, Kubernetes, or cloud container security
Experience creating dashboards, log ingestion or data streams in Splunk

#LI-AF2

#LI-Hybrid

What's in it for you:

We’re all about the little helps. That’s why we make sure our Tesco colleague benefits package takes care of you – both in and out of work. Click Here to find out more!

Annual bonus scheme of up to 20% of base salary
Holiday starting at 25 days plus a personal day (plus Bank holidays)
Private medical insurance
26 weeks maternity and adoption leave (after 1 years’ service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 6 weeks fully paid paternity leave
Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing

About us:

Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is 'Serving our customers, communities and planet a little better every day'. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet.

We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We're committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities. We're a big business with diverse working patterns and many business areas which means that we can find something that works for you. Everyone is welcome at Tesco.

We have recently announced that we will be moving towards a more blended working week – combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate. Please talk to us to about how this can work for you.

NOTE: Should you be successful in your application, your offer will be subject to and conditional upon you providing your bank account details on your agreed start date.

We're proud to have been accredited Disability Confident Leader and we're committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please visit https://www.tesco-careers.com/accessibility