Platform Engineer

CNAPP Platform Engineer

At Vodafone, we're working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.

With us, you can be truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Join Us At Vodafone, we're not just shaping the future of connectivity for our customers – we're shaping the future for everyone who joins our team. When you work with us, you're part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

Global Cyber Security's role is to inspire trust and confidence in our customers by enabling secure connectivity. Our purpose is to proactively protect Vodafone & its customers by reducing the risks posed by security threats to Vodafone's global technology infrastructure and the sensitive data it holds. Responsible for leading the design, integration, and optimisation of CNAPP capabilities focused on cloud posture, workload protection and cloud identity risk across hybrid and multi-cloud environments.

Acts as a technical leader and strategic advisor to cloud and platform teams, embedding security guardrails and automated controls to improve cloud security posture at scale.

Technical owner for CNAPP, including onboarding, configuration, policy management, optimisation, and day-to-day engineering support;
Build and maintain cloud posture policies (CSPM) and runtime/workload protection policies (CWPP) for VMs, containers and Kubernetes;
Integrate CNAPP findings into operational workflows (ticketing, reporting, dashboards) and drive actionable remediation;
Drive cloud security guardrails, standards and reference patterns (landing zones, logging/monitoring, encryption, network segmentation, secrets handling);
Partner with cloud engineering/SRE teams to design scalable controls using automation and policy-as-code (where applicable), reducing manual effort and improving consistency;
Design and operate CNAPP RBAC aligned to least privilege and separation of duties (admin, security analyst, engineering viewer, etc.);
Integrate CNAPP with corporate SSO/IdP and enforce strong access controls (MFA/Conditional Access where applicable);
Improve identity security posture by identifying and driving remediation for over-privileged roles, risky permissions and exposed credentials (in collaboration with IAM/Cloud teams);
Drive vulnerability management strategy across cloud workloads and container layers using risk-based prioritisation and exposure context;
Partner with cloud/platform teams to reduce MTTR and improve vulnerability posture, focusing on high-impact systemic fixes;
Collaborate with cloud engineering, infrastructure, application teams and security to align on priorities and integrate CNAPP into governance;
Define KPIs (coverage, policy compliance, critical exposure reduction, vulnerability ageing) and lead continuous improvement initiatives;
Act as escalation point for complex cloud security and platform integration challenges.

Degree in Computer Science / Information Systems (or equivalent experience); 3+ years' experience in Cloud Security / CNAPP / Dev Sec Ops  or related domains, operating security platforms at scale;
Hands-on experience administering and optimising CNAPP platforms (e.g., Wiz, Prisma Cloud or equivalent);
Strong cloud security knowledge across AWS/Azure/GCP, including containers/Kubernetes security and cloud configuration controls;
Experience with CSPM, CIEM, CWPP, KSPM and Container Security;
Security automation scripting, and API integrations to enable scalable controls;
Strong stakeholder partnering and ability to influence adoption…