At Bupa, we're passionate about technology. With colleagues, customers, patients, and residents in mind, you'll have the opportunity to work on innovative projects and make a real impact on their lives. Right from the start, you'll become part of our digital & data strategy, joining us on our journey and developing yourself along the way.
As a Senior Security Penetration Testing Analyst, you'll lead and manage the full penetration testing lifecycle across Bupa's UK business. As a senior member of the CISO function, you'll coordinate end-to-end testing engagements, provide subject matter leadership, and ensure findings are effectively governed and reported. You'll support junior team members, collaborate cross-functionally, and contribute to strategic improvements in penetration testing processes and assurance models.
How you'll help us make health happen:
1. Act as the senior technical lead for the Penetration Testing team, overseeing end-to-end testing processes and ensuring findings are effectively managed and remediated.
2. Collaborate with internal teams and third-party suppliers to drive continuous improvement in penetration testing practices.
3. Serve as the technical SME, validating methodologies and representing the function in governance forums.
4. Build strong relationships across Cyber Security and the wider business to raise awareness and support strategic initiatives.
5. Mentor junior team members and foster a culture of learning and high performance.
6. Ensure alignment with Bupa's enterprise security policies, standards, and tools.
7. Provide consultancy and guidance to ensure compliance with regulations and internal policies.
8. Liaise with external stakeholders, including regulators and partners, on incident response and security matters.
Qualifications and skills include:
* Degree-level education or equivalent training.
* Highly desirable: Professional certifications such as OSCP, CISSP, OSEP, CISM, or CRT/CCT.
* Strong understanding of penetration testing tools, techniques, and frameworks (e.g., Nessus, Metasploit, Burp Suite).
* Familiarity with Red/Purple Teaming, attack automation, and threat exposure tools.
* Knowledge of cloud security (Azure, AWS, GCP), Zero Trust, containers, and serverless architectures.
* Understanding of identity and privileged access management.
* Awareness of cybersecurity regulations and standards (e.g., NIST, PCI DSS, GDPR, ISO 27001).
* Excellent analytical and problem-solving skills, with the ability to translate technical issues into actionable insights.
* Strong communication skills, able to engage with both technical and non-technical stakeholders.
* Capable of working under pressure, managing priorities, and maintaining confidentiality.
* Self-motivated with a proactive approach to learning and continuous improvement.
* Able to influence and collaborate across teams, including external partners and regulators.
Our benefits include:
* 25 days holiday, increasing with length of service, with options to buy or sell.
* Bupa health insurance as a benefit in kind.
* An enhanced pension plan and life insurance.
* Annual performance-based bonus.
* Onsite gyms or local discounts where no onsite gym is available.
* Various other benefits and online discounts.
Why Bupa? We're a health insurer and provider focused on helping people live longer, healthier, happier lives. We value diversity and encourage applications from people with diverse backgrounds. Bupa is a Level 2 Disability Confident Employer, committed to fair treatment and reasonable adjustments during recruitment.
Time Type: Full time
#J-18808-Ljbffr