How you’ll make an impact

• Strengthen our cloud security posture by implementing and enhancing controls that reduce risk and improve resilience
• Monitor, review and optimise WAF rules and performance to protect customer-facing platforms from evolving threats
• Oversee compliance against security control schedules for outsourced infrastructure providers, ensuring alignment with our standards
• Analyse security metrics and contribute to regular health reporting, enabling informed decision making and measurable risk reduction
• Support security incident response, coordinating with internal and external teams to resolve incidents quickly and minimise business impact
• Identify vulnerabilities and partner with stakeholders to prioritise remediation, reducing exposure across hybrid environments
• Maintain high quality documentation, standards and procedures to ensure consistent, compliant security practices

What you’ll bring



• At least 2 years of experience in cybersecurity roles, with practical exposure to operational security environments
• Experience working with WAF and cloud technologies, ideally within hybrid cloud environments
• Strong understanding of security principles such as defence in depth, least privilege, confidentiality, integrity and availability
• Experience with DDoS protection, API security, threat and vulnerability analysis, and risk assessment methodologies
• Knowledge of security incident response processes, governance practices and security control frameworks
• Familiarity with SIEM tools and security monitoring, with the ability to interpret alerts and translate data into insights
• Exposure to penetration testing concepts and emerging security risks, trends and architecture patterns is an advantage
• A qualification in business, computer science, engineering or equivalent experience, along with a genuine passion for cybersecurity
• Security or cloud certifications such as AWS or CISSP are beneficial, but not essential