About the role:

Join Our Team at Holland & Barrett!

Are you passionate about cloud security and looking to make a significant impact? Holland & Barrett is seeking a Cloud Security Specialist to help us define and implement our cloud security strategy. If you're an experienced professional eager to work with cutting-edge technology and collaborate with diverse teams, we want to hear from you!

Key Responsibilities:

• Security Strategy: Help define and execute the Holland & Barrett cloud security strategy, partnering with platform and Site Reliability Engineering (SRE) teams to build robust infrastructure that supports our business.
• Perimeter Security: Establish platform perimeter security by implementing controls at ingress and egress points, including creating and maintaining an edge network with a Web Application Firewall (WAF), Distributed Denial of Service (DDoS) protection, and a Content Delivery Network (CDN).
• Access Control: Establish an access control baseline focusing on the principle of least privilege and segregation of duties. Monitor and enforce these controls once roles and permissions are set.
• Security Controls: Design, implement, and maintain security controls to prevent, detect, and remediate insecure configurations, including defining and disseminating secure AWS/infrastructure baselines.
• Standards Development: Own the development and maintenance of tailored security standards and guidelines, creating reusable resources for various development teams.
• AWS Security Services: Establish and manage AWS security services, including certificate authorities, encryption services, insecure configuration scanners, and security control canaries.

• 5+ years of experience in cloud security, particularly with AWS, and at least 2+ years in software development.
• Strong understanding of cloud and application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms.
• Experience with AWS, Kubernetes, Service Mesh, API gateways, and API Security (authentication and authorization).
• Proficiency in programming languages such as Python, JavaScript, GoLang, Terraform, CloudFormation (AWS), and AWS CDK.
• Familiarity with Agile methodologies like SCRUM, along with proven project management skills to manage multiple security projects effectively.

• Ability to work independently, take initiative, and maintain a keen attention to detail, ensuring high security standards.
• Strong communication and interpersonal skills, facilitating effective collaboration with both technical and non-technical teams.

• Pension company contribution = 3%
• Incentive scheme up to 10% of annual salary, based on company performance.
• Your wellbeing is paramount so you can get away and take 33 Days Holiday per year.
• Private Medical Care (Self after 1 year)
• Learning and Development opportunity with Holland & Barrett is a great base for career development long term.
• Career progression.
• Refer and Earn Scheme - as we're growing you can earn money by referring people to join us from your network.
• Epic Extras gives you access to exclusive benefits, free advice and savings from a range of retailers and providers.
• Stay healthy with Discounted Products - from day one you'll get a 25% discount (on top of other promotions) when you shop at H&B on anything that you buy.
• We all need a little help sometimes, so weoffer Free 24/7 Confidential Advice & Colleague Welfare.
• Mental Health First Aiders - we have lots of qualified Mental Health First Aiders because its all about your health & wellbeing.
• Stay active in the Onsite Gym at our Nuneaton Hub!
• We have colleague Reward and Recognition Schemes, so your hard work and loyalty won't go unnoticed.
• And many more!