About this role
Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Intern/Trainee
Job Description & Summary
Our Cloud and Infrastructure Security team helps organizations use cloud technology securely while benefiting from the flexibility and speed that cloud platforms provide.
We help clients answer practical questions such as: Is our cloud environment configured securely? Who should have access to sensitive resources? How do we protect data and applications? And how can security be built into cloud environments from the start rather than added afterwards?
As a Graduate/ Associate, you will learn how cloud environments work, support security assessments and help clients identify and address weaknesses across platforms such as Microsoft Azure, AWS, Microsoft 365 and Google Cloud.
Core Activities: "What You'll Be Working On"
- Support cloud security architecture assessments across Azure, AWS and other hyperscalers - document current-state designs, map controls to agreed reference architectures and track architecture improvement actions.
- Assist with deploying and testing Microsoft Defender XDR policies and Microsoft Sentinel analytics rules, workbooks and watchlists.
- Help configure Microsoft Purview DLP policies, sensitivity labels, auto-labelling rules and data classification scans.
- Run vulnerability scans across cloud workloads, containers, servers and network devices, then build prioritised remediation reports for client teams.
- Support identity and access reviews - privileged role usage, stale accounts and excessive permissions in cloud and M365 estates.
- Maintain evidence packs, control-mapping trackers and posture dashboards for recurring client reporting.
- Assist with onboarding new subscriptions, accounts and data sources into posture, logging and DLP tooling.
- Support infrastructure security reviews - OS/server hardening against CIS Benchmarks, firewall rule reviews and network segmentation checks.
Key Skills: "What candidates need to have"
Typically 0–4 years of experience . Previous cloud or cybersecurity experience is helpful, but not required.
- Cloud and infrastructure fundamentals - Azure/AWS core services, TCP/IP networking, firewalls, Windows/Linux and the shared responsibility model.
- Cloud security posture and IAM basics - identity models, roles, policies, least privilege and common misconfiguration patterns.
- Familiarity with Microsoft Defender (for Cloud, Endpoint, Identity, Office 365) and Microsoft Sentinel navigation and reporting.
- Microsoft Purview basics - DLP policies, DSPM, sensitivity labels, data classification and content explorer.
- Working knowledge of CSPM/CNAPP tooling such as Microsoft Defender for Cloud, Wiz or Prisma Cloud.
- Scripting (PowerShell, Python) and KQL fundamentals for querying logs and automating evidence collection.
- Understanding of vulnerability management lifecycle and CVSS-based prioritization.
- Accurate documentation and clear reporting for technical and non-technical client audiences.
- Certifications: AZ-900, SC-900 or AWS Cloud Practitioner; CompTIA Security+ / Network+; CCSK desirable.
Knowledge Exposure: "What you'll build expertise in"
During your first projects, you will learn how organizations secure cloud environments and how security principles translate into practical configurations and controls. You will build exposure to cloud architecture, identity and access, network and infrastructure security, server and endpoint hardening, data protection, security monitoring, DevSecOps and cloud security assessments while developing your technical consulting skills.
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date
October 19, 2027