About this role
Salary: £75,000 - 75,000 per year
Requirements: Strong knowledge of cloud security across modern environmentsAdvanced knowledge and hands-on experience with attack methodologies and security testingExperience across penetration testing (application and network), AppSec, wireless security and vulnerability managementExperience implementing and managing security controls (e.g. DLP, patching, RBAC, PAM, AV, DDoS mitigation, web proxy, vulnerability management)Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO)Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS)Effective communication skills, including the ability to explain technical concepts and impacts to non-technical stakeholdersAbility to quickly learn new technologies and support others in understanding themAbility to work both alone and collaboratively within a team Responsibilities: Own and champion our cloud security toolsets, acting as the subject matter expert and providing high-quality second-line supportStrengthen and evolve the configuration of security tooling across our cloud environments, contributing to wider Information Security initiatives and projectsAct as the key liaison between internal teams, third-party suppliers, and product vendors to ensure effective support and performance of applications and systemsProactively monitor security systems and tools, leading the response to security incidents and issuesSupport investigations and incident response, including participation in an on-call security rota when requiredProvide trusted expert advice across our business on security applications and tooling best practiceEnable training, knowledge sharing, and capability uplift across Information Security and wider IT teamsCommunicate clearly and confidently with both technical and non-technical audiences, influencing stakeholders and driving informed decision-makingCreate and maintain clear technical documentation for system configurations, procedures, and operational processesPartner closely with architecture teams to support the design and delivery of new Security Operations Centre (SOC) capabilitiesSupport the planning and delivery of penetration testing activities, owning the coordination and remediation of identified findingsActively contribute to the continuous improvement of our Information Security posture, staying current with emerging threats, trends, and industry best practice Technologies: CloudSupportJenkinsMavenNetworkOWASPRBACSecurityWeb More:
We are Vitality, a multi-award-winning UK insurance brand with a purpose and values-driven culture focused on making people healthier and enhancing and protecting lives. We have been recognised as one of Glassdoors Best Places to Work 2026 and a Top 10 Place to Work in the Sunday Times Awards in 2024. This is a hybrid role based in our Bournemouth office, working 2 days per week, full time at 35 hours per week, with flexibility available. We offer a range of benefits including bonus schemes, a pension of up to 12% with contributions matched up to 6% of salary, award-winning Vitality health insurance, and life assurance at four times annual salary. We also promise support for your wellbeing, career growth, flexibility, and a healthy balance of challenge and support.
last updated 38 week of 2026