## Join Us
At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.
Global Cyber Security’s role is to inspire trust and confidence in our customers by enabling secure connectivity. Our purpose is to proactively protect Vodafone & its customers by reducing the risks posed by security threats to Vodafone’s global technology infrastructure and the sensitive data it holds.
Responsible for leading the design, integration, and optimisation of CNAPP capabilities focused on cloud posture, workload protection and cloud identity risk across hybrid and multi‑cloud environments. Acts as a technical leader and strategic advisor to cloud and platform teams, embedding security guardrails and automated controls to improve cloud security posture at scale.
## What you’ll do
* Technical owner for CNAPP, including onboarding, configuration, policy management, optimisation, and day‑to‑day engineering support;
* Build and maintain cloud posture policies (CSPM) and runtime/workload protection policies (CWPP) for VMs, containers and Kubernetes;
* Integrate CNAPP findings into operational workflows (ticketing, reporting, dashboards) and drive actionable remediation;
* Drive cloud security guardrails, standards and reference patterns (landing zones, logging/monitoring, encryption, network segmentation, secrets handling);
* Partner with cloud engineering/SRE teams to design scalable controls using automation and policy‑as‑code (where applicable), reducing manual effort and improving consistency;
* Design and operate CNAPP RBAC aligned to least privilege and separation of duties (admin, security analyst, engineering viewer, etc.);
* Integrate CNAPP with corporate SSO/IdP and enforce strong access controls (MFA/Conditional Access where applicable);
* Improve identity security posture by identifying and driving remediation for over‑privileged roles, risky permissions and exposed credentials (in collaboration with IAM/Cloud teams);
* Drive vulnerability management strategy across cloud workloads and container layers using risk‑based prioritisation and exposure context;
* Partner with cloud/platform teams to reduce MTTR and improve vulnerability posture, focusing on high‑impact systemic fixes;
* Collaborate with cloud engineering, infrastructure, application teams and security to align on priorities and integrate CNAPP into governance;
* Define KPIs (coverage, policy compliance, critical exposure reduction, vulnerability ageing) and lead continuous improvement initiatives;
* Act as escalation point for complex cloud security and platform integration challenges.
## Who you are
* Degree in Computer Science / Information Systems (or equivalent experience);
* 3+ years’ experience in Cloud Security / CNAPP / DevSecOps or related domains, operating security platforms at scale;
* Hands‑on experience administering and optimising CNAPP platforms (e.g., Wiz, Prisma Cloud or equivalent);
* Strong cloud security knowledge across AWS/Azure/GCP, including containers/Kubernetes security and cloud configuration controls;
* Experience with CSPM, CIEM, CWPP, KSPM and Container Security;
* Security automation scripting, and API integrations to enable scalable controls;
* Strong stakeholder partnering and ability to influence adoption without direct authority;Exposure to Wiz / Prisma Cloud / Rapid7 (or equivalent CNAPP tooling) and vulnerability tooling;
* Security certifications (e.g., CISSP, CCSP) and/or relevant cloud certifications;
* Security certifications preferred (e.g., CISSP, CCSP, CSSLP, GWAPT, GCSA);
* Fluency in English.
## Not a...
Want jobs like this matched to you?
SimpleCareer scores fresh postings against your résumé so you only see the matches that matter.