IT Security Operations Specialist

A major infrastructure services provider are seeking to appoint an IT Security Operations Specialist to join their team in West Sussex.

The business has a lot to offer IT, analytics and project management professionals. They've already grown tenfold in the past couple of years and are now beginning a £106 million transformation programme. The company is on a major transformation journeyand is committed to evolving so that they provide an excellent service to their customers, stakeholder whilst positively impacting the local environment.

Working in a team within Security operations you will perform all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
Duties
- Respond to incidents and requests assigned to the SecOps team within SLAs 24 x 7 (On call support as part of a managed rota for out of core hours) in line with IT security standards
- Provide information regarding intrusion events, security incidents, and other threat indications and warning information to teams.
- Perform in-depth analysis (Root Cause Investigation) of incidents and create a final incident report.
- Conduct proactive threat and compromise research and analysis.
- Participate and assist in planning, management and execution of vulnerability and risk assessment projects
- Monitor and analyse network traffic and security event data.
Responsibilities will include:

- Investigate and manage intrusion attempts, perform in-depth analysis of exploits and eradicate malicious activitiy.
- Provide network intrusion detection expertise to support timely and effective decision making
- Conduct proactive threat and compromise research and analysis.
- Review security events that are populated in a Security Information and Event Management (SIEM) system.
- Analysis of a variety of network and host-based security appliance logs, determine the correct remediation actions and escalation paths for each incident.
- Assist with the development of processes and procedures to improve incident response times, analysis of incidents, and overall SOC functions.
- Strong verbal/written communication and interpersonal skills are required to document and communicate findings, escalate critical incidents to technical and non-technical audiences at different seniority levels and interact with customers
- Ability to maintain a high level of discretion and personal integrity in the exercise of duties, including the ability to professionally address confidential matters
- Attention to detail
- Able to manage situations of complexity with positive outcomes
- Ability to clearly communicate actionable insights and complex findings

**Experience required**:

- An understanding of adversary motivations including cybercrime, cyber hacktivism, cyber war, cyber espionage and the difference between cyber propaganda and cyber terrorism
- An understanding of security operations concepts such as perimeter defence, kill chain analysis, Threat Intelligence and Threat Profiling
- Familiarity with network security methodologies, tactics, techniques, and procedures
- Experience with Intrusion Detection Systems (IDS)/ Intrusion Protection Systems (IPS), SIEM and other network defence security tools
- Experience performing security/vulnerability reviews of network environments
- Experience with enterprise anti-virus/malware solutions, virus outbreak management and the ability to differentiate virus activity from directed attack patterns
- Have experience monitoring, detecting and leading response efforts of advanced persistent threats
**Qualifications**
Ideally 3 or more of the following:

- A bachelor’s degree in computer engineering, computer security or computer science discipline.
- ISO27001/ISO27002
- GDPR/ UK Data Protection Act 2018
- PCI DSS
- Environmental Information Regulations
- NIS Regulations
- CISMP
- CISSP
- ITIL Foundation

**Company benefits offered**:

- Company and performance-related bonus
- Generous pension with up to 11% company contribution
- Life assurance payment equal to four times your annual salary
- Health benefits through a Cash Plan
- Two paid community volunteering days a year
- 25 days annual holiday
- Occupational health service
- Perkbox benefits offering discounts and savings on several products and experiences
- Study support may be available for job-related qualifications
Competitive maternity leave and flexible return to work options