Senior Cloud Security Engineer

Salary: £75,000 - 75,000 per year

Requirements:

• Strong knowledge of cloud security across modern environments
• Advanced knowledge and hands-on experience with attack methodologies and security testing
• Experience across penetration testing (application and network), AppSec, wireless security and vulnerability management
• Experience implementing and managing security controls (e.g. DLP, patching, RBAC, PAM, AV, DDoS mitigation, web proxy, vulnerability management)
• Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO)
• Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS)
• Effective communication skills, including the ability to explain technical concepts and impacts to non-technical stakeholders
• Ability to quickly learn new technologies and support others in understanding them
• Ability to work both alone and collaboratively within a team

Responsibilities:

• Own and champion our cloud security toolsets, acting as the subject matter expert and providing high-quality second-line support
• Strengthen and evolve the configuration of security tooling across our cloud environments, contributing to wider Information Security initiatives and projects
• Act as the key liaison between internal teams, third-party suppliers, and product vendors to ensure effective support and performance of applications and systems
• Proactively monitor security systems and tools, leading the response to security incidents and issues
• Support investigations and incident response, including participation in an on-call security rota when required
• Provide trusted expert advice across our business on security applications and tooling best practice
• Enable training, knowledge sharing, and capability uplift across Information Security and wider IT teams
• Communicate clearly and confidently with both technical and non-technical audiences, influencing stakeholders and driving informed decision-making
• Create and maintain clear technical documentation for system configurations, procedures, and operational processes
• Partner closely with architecture teams to support the design and delivery of new Security Operations Centre (SOC) capabilities
• Support the planning and delivery of penetration testing activities, owning the coordination and remediation of identified findings
• Actively contribute to the continuous improvement of our Information Security posture, staying current with emerging threats, trends, and industry best practice

Technologies:

• Cloud
• Support
• Jenkins
• Maven
• Network
• OWASP
• RBAC
• Security
• Web

More:

We are Vitality, a multi-award-winning UK insurance brand with a purpose and values-driven culture focused on making people healthier and enhancing and protecting lives. We have been recognised as one of Glassdoors Best Places to Work 2026 and a Top 10 Place to Work in the Sunday Times Awards in 2024. This is a hybrid role based in our Bournemouth office, working 2 days per week, full time at 35 hours per week, with flexibility available. We offer a range of benefits including bonus schemes, a pension of up to 12% with contributions matched up to 6% of salary, award-winning Vitality health insurance, and life assurance at four times annual salary. We also promise support for your wellbeing, career growth, flexibility, and a healthy balance of challenge and support.

last updated 39 week of 2026