Requirements
·Knowledge of information security principles and practice·Experience with antivirus, anti-malware, and proxy solutions·Computer programming and scripting languages (Python, C++, Perl)·Bachelor’s degree and 12+ years of professional IT experience, including Cyber Security at least five years·Thorough knowledge of preventative security controls, particularly in relation to protecting applications and data (i.e., firewalls, IDS/IPS, WAFs, anti-malware systems, cross-site scripting libraries)·Experience securing common services·Experience of risk management and accreditation within the MoD desirable·Thorough understanding of the cyber kill chain or attack vectors·Experience with Firewall rule management, multi-factor authentication, data center zoning, VPNs, and advanced security software such as network policy management and application whitelisting is required·Malware Analysis, IDS/IPS Analysis·Understanding and experience with privacy and regulatory compliance, including information security enterprise risk assessments, PCI remediation, data protection, and strategy
Description
•Stay up to date, apply, and inform automation and IT teams of the changing landscape of regulations in the cybersecurity sphere• Be an advocate and liaison with our automation and IT teams for Operation Transformation (OT) projects and programs• Lead client meeting/discussions/workshops on cyber-security• Manage individuals to and/or design, develop, and maintain network and security monitoring systems, test and start up industrial servers• Lead strategic enterprise security architecture definition based on business requirements, risk management practices, and IT strategies• Assess strategic & near-term security needs, using a blended approach with the Cybersecurity Framework and ISO 27001, to align security priorities• Resolve or escalate security incidents and service requests in line with established service level targets and assume ownership of, and provide• Interpret network traffic and system events to identify threats and/or rule out anomalous activity• Validate, verify and increase the confidence of threat intelligence data• Develop and execute processes for threat intelligence data enrichment and pivoting• Evaluate sources of threat intelligence data both internal and external to the organization• Manage threat intelligence data source relationships and data ingestion mechanisms• Develop presentations, reports, and metrics related to threat intelligence data in the enterprise