Platform Engineer
Indexed description
Global Cyber Security’s role is to inspire trust and confidence in our customers by enabling secure connectivity. Our purpose is to proactively protect Vodafone & its customers by reducing the risks posed by security threats to Vodafone’s global technology infrastructure and the sensitive data it holds.
Responsible for leading the design, integration, and optimisation of CNAPP capabilities focused on cloud posture, workload protection and cloud identity risk across hybrid and multi‑cloud environments. Acts as a technical leader and strategic advisor to cloud and platform teams, embedding security guardrails and automated controls to improve cloud security posture at scale.
What You’ll Do
- Technical owner for CNAPP, including onboarding, configuration, policy management, optimisation, and day‑to‑day engineering support;
- Build and maintain cloud posture policies (CSPM) and runtime/workload protection policies (CWPP) for VMs, containers and Kubernetes;
- Integrate CNAPP findings into operational workflows (ticketing, reporting, dashboards) and drive actionable remediation;
- Drive cloud security guardrails, standards and reference patterns (landing zones, logging/monitoring, encryption, network segmentation, secrets handling);
- Partner with cloud engineering/SRE teams to design scalable controls using automation and policy‑as‑code (where applicable), reducing manual effort and improving consistency;
- Design and operate CNAPP RBAC aligned to least privilege and separation of duties (admin, security analyst, engineering viewer, etc.);
- Integrate CNAPP with corporate SSO/IdP and enforce strong access controls (MFA/Conditional Access where applicable);
- Improve identity security posture by identifying and driving remediation for over‑privileged roles, risky permissions and exposed credentials (in collaboration with IAM/Cloud teams);
- Drive vulnerability management strategy across cloud workloads and container layers using risk‑based prioritisation and exposure context;
- Partner with cloud/platform teams to reduce MTTR and improve vulnerability posture, focusing on high‑impact systemic fixes;
- Collaborate with cloud engineering, infrastructure, application teams and security to align on priorities and integrate CNAPP into governance;
- Define KPIs (coverage, policy compliance, critical exposure reduction, vulnerability ageing) and lead continuous improvement initiatives;
- Act as escalation point for complex cloud security and platform integration challenges.
- Degree in Computer Science / Information Systems (or equivalent experience);
- 3+ years’ experience in Cloud Security / CNAPP / DevSecOps or related domains, operating security platforms at scale;
- Hands‑on experience administering and optimising CNAPP platforms (e.g., Wiz, Prisma Cloud or equivalent);
- Strong cloud security knowledge across AWS/Azure/GCP, including containers/Kubernetes security and cloud configuration controls;
- Experience with CSPM, CIEM, CWPP, KSPM and Container Security;
- Security automation scripting, and API integrations to enable scalable controls;
- Strong stakeholder partnering and ability to influence adoption without direct authority;Exposure to Wiz / Prisma Cloud / Rapid7 (or equivalent CNAPP tooling) and vulnerability tooling;
- Security certifications (e.g., CISSP, CCSP) and/or relevant cloud certifications;
- Security certifications preferred (e.g., CISSP, CCSP, CSSLP, GWAPT, GCSA);
- Fluency in English
What's In It For You
- Hybrid Work Model - Flexible hybrid work model with 8-10 in-office days per month, managed by team leaders;
- Vodafone Products and Services - Employees get a mobile phone, free communication plan, data card, and various discounts on services and products;
- Recognition - Recognition programs for innovative, creative, high-potential employees and exemplary behaviors;
- Health and Well-being - Well-being Program offers nutrition and psychological consultations, webinars, workshops, and discounts on various services and products;
- Learning - Access to Communities of Practice and a customizable digital training platform with high-quality content (namely Harvard Business Publishing, Skillsoft and Speexx);
- Local and International Mobility - Internal recruitment with local and international rotation opportunities across departments and roles
Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.
If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.
Together we can.
Create a free Caio profile to unlock more results and save your role and location preferences.
Unlock free search