Bridewell

Cloud Engineer

• Define and execute the Cloud Security strategy, aligned with wider business objectives and growth plans.
• Shape the future direction of the Cloud practice, identifying emerging technologies, market trends, and new service opportunities.
• Lead the strategic adoption of AI and cloud security technologies to enhance both customer outcomes and internal capabilities.
• Build and maintain a roadmap that ensures the organisation remains at the forefront of cloud security innovation.
• Work with managers across the Cloud practice to develop a high-performing team of Cloud Security Consultants and Technical Specialists.
• Act as a senior technical and strategic advisor to clients.
• Drive capability development across Microsoft Azure, AWS Security, emerging AI security platforms, etc.
• Support sales forecasting, pipeline development, and service expansion initiatives.

Head of Cloud Engineering

Security Engineer

• Join Bridewell’s 18-month Academy programme towards becoming a qualified offensive security professional.
• Develop technical, consulting and client-facing skills for high-quality penetration testing services.
• Work alongside experienced penetration testers and consultants, gaining exposure to real engagements.
• Build foundation in penetration testing methodology, technical security principles and consulting behaviours.
• Work towards key early-career milestones including Cyber Scheme Foundation Level (CSFL).
• Assist experienced consultants with real client engagements during hands-on training.
• Deepen understanding of web application testing, vulnerability identification and remediation advice.
• Progress towards recognised industry practitioner status in final stage of Academy.
• Be supported by a dedicated mentor and access to structured learning platforms.

Academy Penetration Testing Consultant

• Support Client Engagements: Assist in the delivery of high-quality cloud engineering projects. Help clients design, deploy, and operate workloads across Microsoft Azure, Microsoft 365, AWS, and GCP, contributing to activities such as landing zone builds, identity and access configuration, network design, and the deployment and tuning of Microsoft Defender, Microsoft Sentinel, and Microsoft Purview alongside equivalent native security services in other clouds.
• Stay Informed: Actively engage in professional development by attending relevant training sessions, hackathons, vendor workshops (Microsoft, AWS, Google), and industry conferences to remain current with the latest cloud services, security tooling, architectural patterns, and engineering best practices.
• Collaborate with Consultants: Work closely with senior cloud and security engineers on project tasks — helping to gather requirements, build proofs-of-concept, author detections and analytics rules in Sentinel, configure Defender policies, script automation (e.g. PowerShell, KQL, Bicep, Terraform, ARM, CloudFormation), and prepare technical documentation to ensure project objectives are met efficiently and effectively.
• Participate in Team Meetings: Join regular squad stand-ups, design reviews, and retrospectives to discuss project progress, share insights, and gather feedback, fostering a collaborative engineering culture and enhancing your personal learning.
• Conduct Technical Research: Help with preliminary research on emerging cloud and security services, reference architectures, and comparative analysis between vendors (Azure/M365 vs. AWS vs. GCP) to support project work and internal capability development.
• Engage with Clients: Participate in client meetings, technical workshops, and whiteboarding sessions as needed, providing support and gathering information to understand client requirements and contribute to high-quality service delivery.

Cloud Security Consultant

Consultant

• Support Client Engagements: Assist in the delivery of high-quality client projects. Help clients navigate the processes required for achieving certifications such as ISO27001, PCI-DSS compliance, whilst providing support in various other areas of cybersecurity as needed.
• Stay Informed: Actively engage in professional development by attending relevant training sessions, workshops, and industry conferences to remain current with the latest trends, technologies, and best practices in cybersecurity.
• Collaborate with Consultants: Work closely with consultants on project tasks, helping to gather information, conduct research, and prepare documentation to ensure project objectives are met efficiently and effectively.
• Participate in Team Meetings: Join regular team meetings to discuss project progress, share insights, and gather feedback, fostering a collaborative team environment and enhancing personal learning.
• Conduct Basic Research: Help with preliminary research on cybersecurity topics, industry trends, and competitor analysis to support project work and business development initiatives.
• Engage with Clients: Participate in client meetings and communications as needed, providing support and gathering information to understand client needs and enhance service delivery.

Academy Consultant

Analyst

• Shadowing IT staff to gain an understanding of internal IT estate.
• Building and setting up new and replacement machines for staff.
• Organising IT assets and inventory.
• Responding to IT helpdesk incidents.
• Assisting with policy creation and updates.

IT Analyst

• Primary responsibility will be to deliver on client engagements, typically this could be working on one large programme of work or delivering on a number of different privacy projects for a select group of Bridewell’s clients.
• Activities may include but not limited to: Implementing Data Protection by Design and Default processes;
• Data Breach investigation, assessment and notification;
• Implementing and conducting Data Protection Impact Assessments;
• Data protection and privacy considerations in supply chains;
• Data mapping;
• Implementation and handling of data subject rights processes;
• Producing Privacy Notices and Policies;
• Provision of advice on data protection and privacy matters;
• Development of Records of Processing Activities and related processes.
• Delivering and preparing training and awareness programmes.
• Third party due diligence and ongoing assurance.
• Review and drafting of data protection processing agreements.
• Identification, mitigation and management of privacy risks.
• Staying up to date with privacy requirements and changes through your own research as well as attending conferences and events.
• Working with others to identify sales opportunities and support pre-sales activities.

Head of Cloud Engineering

Academy Penetration Testing Consultant

Cloud Security Consultant

Academy Consultant

IT Analyst

Senior Data Privacy Consultant