Cyber Security Specialist: Vulnerability Management & Cloud Risk

Aviva; Bristol; On-site; GBP 39,950 - 54,050; Full time

Benefits offered by this job

Generous pension scheme

Private Medical Benefit

Share scheme

Flexible working

Job summary

Aviva is seeking a Cyber Security Specialist to join our Vulnerability Management team. You will identify, assess and prioritise vulnerabilities across our technology estate, collaborating with technology and business teams to strengthen security controls and reduce attack surface.

The role requires experience in vulnerability management, cloud security (AWS), and working with security tooling such as Tenable.

Qualifications

• Experience in vulnerability management with risk-based prioritisation.
• Hands-on experience with vulnerability scanning tools such as Tenable.
• Experience with AWS environments and cloud security concepts.
• Knowledge of CIS and NIST frameworks and attack surface exposure.
• Experience integrating security tooling with ServiceNow/CMDB; scripting in Python/PowerShell.

Responsibilities

• Identify, assess and prioritise vulnerabilities across the technology estate.
• Lead risk-based prioritisation and remediation efforts.
• Collaborate with technology and business teams to strengthen security controls and reduce attack surface.
• Provide guidance on security best practices and cloud security initiatives.
• Support security assessments and incident response through vulnerability management activities.

Skills

Vulnerability management

Risk-based prioritisation

Security tooling

Cloud security (AWS)

Scripting (Python/PowerShell)

Tenable

CMDB integration

Security frameworks (CIS/NIST)

Incident response

Tools

Tenable

ServiceNow

CMDB

AWS

Job description

Aviva is seeking a Cyber Security Specialist to join our Vulnerability Management team. You will identify, assess and prioritise vulnerabilities across our technology estate, collaborating with technology and business teams to strengthen security controls and reduce attack surface.

The role requires experience in vulnerability management, cloud security (AWS), and working with security tooling such as Tenable.