Cyber Security Config Specialist

Closing Date

2023-07-19

Job Title: Cyber Security Configuration Specialist / Engineer

Location: West Durrington / hybrid, Minimum 2 Day in the office per week

Contract Type: Permanent

Hours: 37 hours per week

**Salary**: 45K - 55K

It is an exciting time to join us

Big ambitions. Big investment. Substantial changes. We’ve a lot to offer IT and security professionals. We have already grown tenfold in the past couple of years. We’re underway with a truly enterprise scale transformation programme - and we cannot wait for what comes next, as part of an evolution so huge it will change the way we do things forever. There is a buzz across our business and IT, Cyber, Data Analytics are at the heard of it all.

There are not many teams who can say their work is critical to the nation. But it is something we take huge pride in. And it is why we are migrating to leading technology, upgrading networks, replacing vital infrastructureand more. Helping us shape an IT, Security, analytics and project function that is fit for the future, you will need an appetite for change and bags of ideas. Our people walk the talk too - driven by a passion to improve our communities and environment.

Job Overview

As a Cyber Security Engineer at Southern Water, you will join us on our super exciting journey of IT and security transformation. You will become a crucial member of an existing team supporting the cyber and OT security programme. In the role you will find a good mix of IT and OT as you manage the cyber risk and support the safety and security of Southern Water and their customers.

Reporting to the Information Security Manager, you will be involved in aspects of IT and OT security. As a Cyber Security Engineer, you will be responsible for supporting the safeguarding of our critical infrastructure and systems against cyber threats and ensuring the confidentiality, integrity, and availability of sensitive information. This position plays a vital role in securing our utilities operations, protecting customer data, and maintaining compliance with industry regulations and best practices.

You will be joining a great team, who promotes an excellent work /life balance. With the large transformations that are currently taking place you will have the opportunity to be involved with new projects and technologies, with so much going on there is lots to keep you challenged and focussed.

This is a very technical role and will require a demonstrable foundation in IT/OT and Cyber related fields.

Responsibilities include:
Security Infrastructure Management:

- Design, implement, and maintain robust security infrastructure and systems to safeguard utilities' networks, data centres, and critical assets.
- Support and provide guidance on configuration of firewalls, intrusion detection/prevention systems and other security appliances to detect and respond to potential cyber threats effectively.
- Monitor security logs, analyse security incidents, and respond to security breaches promptly and efficiently.
- Lead in the development of security monitoring and forensic capabilities in a hybrid environment.
- Ensure tools are configurated to support effective and accurate monitoring and reporting on cyber exposure and performance of technology, people and process.

Threat and Vulnerability Assessment:

- Support and develop the configuration, operation and deployment of vulnerability management tools and associated components.
- Conduct regular assessments and audits of systems and networks to identify potential vulnerabilities and weaknesses.
- Perform penetration testing to simulate real-world cyber-attacks and help strengthen defences.
- Collaborate with internal teams and external experts to address identified vulnerabilities and implement necessary patches and updates.

Incident Response and Management:

- Enhance existing incident response plans to handle cybersecurity incidents effectively.
- Lead or assist in investigating security incidents, determining the root cause, and implementing corrective actions to prevent recurrence.
- Work with the SOC to enhance tools, forensic capabilities, accurate reporting/ticket generation and enhance visibility across a hybrid environment.
- Coordinate with various stakeholders, including IT teams, operations personnel, and law enforcement if needed, during incident response efforts.

Security Policies and Compliance:

- Contribute to the routine review of cybersecurity policies, procedures, and standards to align with industry best practices and regulatory requirements.
- Ensure adherence to established security policies and standards throughout the organization.
- Stay current with the latest cyber threats, emerging technologies, and regulatory changes affecting the Utilities industry.

Security Awareness and Training:

- Ensure tooling used to support phishing campaigns are updated, current and effective.
- Keep staff informed about potential cyber threats and best practices for protecting