Senior Cloud Security Engineer

Vitality; Bournemouth; Hybrid; GBP 85,000 - 105,000; Full time

Benefits offered by this job

Bonus scheme

Pension

Health insurance

Life Assurance

Job summary

Vitality is seeking a Senior Cloud Security Engineer to keep member data safe and drive proactive security across cloud environments. You will provide expert guidance and hands-on support, embedding secure practices across the business and ensuring resilient systems.

You’ll strengthen controls, support security operations and lead incident response, working with architecture teams to deliver SOC capabilities and remediation of findings.

Qualifications

• Strong knowledge of cloud security across modern environments.
• Hands-on experience with attack methodologies and security testing.
• Experience in penetration testing, AppSec, wireless security and vulnerability management.
• Understanding of information security frameworks and regulatory requirements.

Responsibilities

• Own and champion Vitality’s cloud security toolsets as subject-matter expert.
• Strengthen security tooling configurations across cloud environments.
• Coordinate between internal teams, suppliers and product vendors for support.
• Monitor security systems, lead incident response, and participate in on-call rota.
• Provide expert security guidance and enable training across teams.
• Document configurations, procedures and operational processes.

Skills

Cloud Security

Security Operations

Vulnerability Management

Job description

Team - Information Security

Working Pattern - Hybrid - 2 days per week in the Vitality Bournemouth Office. Full time, 35 hours per week.

We are happy to discuss flexible working!

Top 3 skills needed for this role:

• Cloud Security Expertise
• Security Operations & Controls experience
• Threat & Vulnerability Management

What this role is all about:

We're looking for a Senior Cloud Security Engineer to join us here at Vitality. You will play a key role in keeping our technology and member data safe. You’ll provide expert security guidance and hands-on engineering support, working closely with teams across the business to embed effective security practices and ensure our environments are well managed and resilient. From strengthening controls to supporting security operations and responding to emerging risks, you’ll help drive a proactive, always-on approach to protecting what matters most.

Key Actions

• Own and champion Vitality’s Cloud Security toolsets, acting as the subject matter expert and providing high-quality second-line support
• Strengthen and evolve the configuration of security tooling across Vitality’s cloud environments, contributing to wider Information Security initiatives and projects
• Be the key liaison between internal Vitality teams, third‑party suppliers, and product vendors to ensure effective support and performance of applications and systems
• Proactively monitor security systems and tools, leading the response to security incidents and issues; support investigations and incident response, including participation in an on-call security rota when required
• Provide trusted expert advice across Vitality on security applications and tooling best practice, enabling training, knowledge sharing, and capability uplift across Information Security and wider IT teams
• Communicate clearly and confidently with both technical and non-technical audiences, influencing stakeholders and driving informed decision-making
• Create and maintain clear technical documentation for system configurations, procedures, and operational processes
• Partner closely with architecture teams to support the design and delivery of new Security Operations Centre (SOC) capabilities
• Support the planning and delivery of penetration testing activities, owning the coordination and remediation of identified findings
• Actively contribute to the continuous improvement of Vitality’s Information Security posture, staying current with emerging threats, trends, and industry best practice

What do you need to thrive?

• Strong knowledge of cloud security across modern environments
• Advanced knowledge and hands-on experience with attack methodologies and security testing
• Experience across penetration testing (application and network), AppSec, wireless security and vulnerability management
• Experience implementing and managing security controls (e.g. DLP, patching, RBAC, PAM, AV, DDoS mitigation, web proxy, vulnerability management)
• Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO)
• Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS)
• Effective communication skills, including the ability to explain technical concepts and impacts to non-technical stakeholders
• Ability to quickly learn new technologies and support others in understanding them
• Ability to work both alone and collaboratively within a team

So, what’s in it for you?

• Bonus Schemes - A bonus that regularly rewards you for your performance
• A pension of up to 12% - We will match your contributions up to 6% of your salary
• Our award-winning Vitality health insurance - With its own set of rewards and benefits
• Life Assurance - Four times annual salary

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page.

Fantastic Benefits. Exciting rewards. Great career opportunities!

If you are successful in your application and join us at Vitality, this is our promise to you, we will:

• Help you to be the healthiest you’ve ever been
• Create an environment that embraces you as you are and enables you to be your best self
• Give you flexibility on how, where and when you work
• Help you advance your career by playing you to your strengths
• Give you a voice to help our business grow and make Vitality a great place to be
• Give you the space to try, fail and learn
• Provide a healthy balance of challenge and support
• Recognise and reward you with a competitive salary and amazing benefits
• Be there for you when you need us
• Provide opportunities for you to be a force for good in society

We commit to all these things because we want you to feel that you belong and are supported to be happy and healthy.