Listing Description

Rothesay is a UK insurance company purpose built to protect pensions. We are the largest specialist pension insurer in the UK, managing over £60bn of assets and securing pensions for over 830,000 people. We secure pensions for over 170 pension schemes and insurers including British Airways, Post Office, ASDA, National Grid and Aegon.

At Rothesay, we are striving to transform our industry. We believe deeply in creating real security for the future and our leadership in finding new and better ways to do that is the key to our success. To do that, we need the very brightest original thinkers to bring creativity as well as rigour. Rothesay is a rewarding place to work, where quality people can thrive and prosper. We pride ourselves on the connections our people build, many of whom have been with us for over ten years.

Job title: Cloud Security Engineering Apprentice

Reporting into: Head of Information Security

Information Security

The Information Security team works across the business to drive business resilience and information assurance across operational, development and business teams. They’re responsible for Rothesay ’s ability to maintain the confidentiality, integrity and availability of Rothesay’s systems and maintain the reputation of the organisation.

Under the leadership of the Chief Technology Officer, Rothesay has launched a multi-year project, Project Quest, to redevelop and modernize the full technology stack, encompassing pricing and other analytics, risk management, market data and trade capture and reporting.

Project Quest is nearing the end of phase one, which over the past year and a half of fast-paced exploration, design and delivery, has successfully delivered to production several key components and established the core engineering required for the new platform.

The successful applicant will be expected to review findings on our Cloud Security Posture Management solution and together with senior Cloud Security Engineers contribute to findings remediation, contribute to the development of preventative and detective controls for the Rothesay cloud platform by engaging the Quest team as well as engineering and software development teams to support secure configuration and deployment of services within the Cloud and enterprise infrastructure.

The Role

We are looking for a passionate cloud security engineering apprentice to join the team and help deliver exceptional value to the rest of the business. As part of the role you can expect to get a lot of exposure to cloud provider services and the best practices on cloud configurations. You can also expect to proactively engage in the development of security focused code and to get familiarised with cloud resources deployment strategies via infrastructure as code and CI/CD pipelines.

As a Cloud Security Engineering apprentice, you will contribute to the monitoring and enhancing of the company security posture.

Remit:

• Monitoring and reviewing the findings reported by the adopted cloud security posture management solution.


• Looking for misconfigurations based on researching of cloud services.


• Proposing remediations for security findings engaging with other teams, where needed.


• Contributing to cloud security posture enhancements by developing code, where needed.


• Occasionally contributing to performing physical infrastructure security assessments.

Skills and Experience:

Required:

• An interest in security.


• An interest in cloud technologies: We are keen to hear about projects you’ve worked on and/or your plans for doing so.


• Ability to learn new technologies, part supervised, part independently. The more independently the better.


• An understanding of coding principles and a familiarity with scripting basics.

Inclusion

Rothesay actively promotes diversity and inclusivity. We know that our success depends on our people and that by nurturing a culture that values difference, we create a stronger, more dynamic business. We welcome applications from all qualified candidates, regardless of race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability or age. 

Disclaimer This position description is intended to describe the duties most frequently performed by an individual in this position. It is not intended to be a complete list of assigned duties, but to describe a position level.  The role shall be performed within a professional office environment. Rothesay has health and safety polices that are available for all workers upon request.  There are no specific health risks associated with the role.