Cyber Defence Lead Detection Engineer

3 weeks ago


London, United Kingdom Live Nation (Music) UK Limited Full time

Description

A Live Nation Entertainment, our goal is to maintain the trust and confidence of our fans, artists, employees and partners. Combined with maintaining the highest level of data security, our handling of information is designed to put the individual in control, ensuring that we handle their information in a way that best serves them and maintaining the highest level of security. Trust and Security identifies and reduces data protection risk, arming the business with industry-leading subject matter expertise as it builds the future of live.

Reporting to the Senior Manager of Cyber Defence, you will be a part of a global, dedicated multidisciplinary team of passionate information security and privacy professionals. You will lead with a strategic, action-oriented mindset focused on performance and accountability as well as align the team’s strategic priorities.

You champion an inclusive environment and foster a broad network – Committed to an environment of engagement, inclusion and respect; enables an environment where all individuals can make a difference; collaborates effectively with leaders across the enterprise.

You engage in intellectual curiosity, agility and experimentation that drives innovation – Integrate diverse views to facilitate breakthroughs; inspire commitment to changes through relevant experiences; challenges others to think differently and creatively.

You are a role model and serve as an active talent champion, coach and mentor – Makes time to coach, mentor and develop talent across the organization; holds management accountable for feedback, coaching and mentoring to team members; advocates a growth mindset for personal development. You build trust and serve as a helpful colleague – Facilitates open deliberation with honest and diverse ideas; influences through listening; promotes others to advance their reputation and visibility through their contributions.

Who you are

Competencies / Skills / Knowledge / Experience

Essential

Knowledge of security tools and technologies such as SIEM, IDS/IPS, firewalls, and antivirus software Data collection methods and best practices Ability to tune and measure detection rules Competency and understanding in CI/CD pipeline Familiar with Detection-as-code Understanding of security frameworks such as NIST, ISO 27001, and PCI DSS Familiarity with scripting languages such as Python or PowerShell Analytical and problem-solving skills Excellent written and verbal communication skills Knowledge of network protocols, operating systems, and applications Knowledge of malware analysis and forensic techniques Ability to analyze and interpret security logs and other data Ability to provide guidance and support to junior SOC analysts Familiarity with cloud security and virtualization technologies

Desirable 

Proven experience in Information Security or similar discipline Demonstrable experience of Linux/Unix, Mac and Windows system analysis experience  Cyber Threat Intelligence knowledge and/or experience Familiarity with the Threat Intelligence lifecycle Experience writing strategic threat reports Experience working in a large enterprise and management of a wide range of security tools such as IDS/IPS (network and host), advanced anti-malware (network and endpoint), DLP, encryption, antivirus, firewalls, identity management, NAC, etc. Experience operating in at least one public cloud platform (AWS, GCP, Azure) and other cloud native technologies (Kubernetes, Docker, Terraform) Familiarity with security standards NIST Cyber Security Framework, NIST SP800-61 R2 and ISO/IEC 27035 Relevant certifications such as Security+, Server+, Linux+ GSEC, GIAC, GCIH, or CISM could be advantageous Deep understanding of security threats, vulnerabilities Manage relationships with business partners, management, vendors, and external parties In-depth technical knowledge of Windows and Unix/Linux based operating systems Strong organisational, multi-tasking, and time-management skills Analytical and strategic mindset to overcome obstacles and solve complex problems Strong organisational skills with the ability to complete tasks assigned in a timely manner Ability to develop team projects and execute strategic initiatives to completion Excellent English written and verbal communication skills, additional languages is a plus  Excellent customer service skills required

Behaviours

The following attributes determine how the role will be carried out and are required to be a success

Strong sense of moral character, high-ethical standards, servant-leader and accountability Flexible and responsive to changing situations. Ability to multitask and prioritise Self-driven, self-disciplined to perform tasks and complete projects with little to no supervision with a high sense of duty Exceptional ability to remain calm under stress Ability to work independently and as part of a team Have a global mind-set for working with different cultures and backgrounds Strong attention to detail Embraces mentorship, knowledge sharing and teaming skills Travel is at a minimum, but some domestic and international travel is required Must be willing to be available 24/7 during weekly on-call rotations, including Weekends and Holidays

What the role includes

Work closely with the Global Security Operations Centre (GSOC), and Cyber Threat Intelligence teams to build new tailored security detections. Build mechanisms that combine multiple detection signals to create higher fidelity threat detections Design, build, and deploy automation to scale system and infrastructure vulnerability and inventory discovery efforts across numerous endpoints, assets, and locations Identify trends and build observability into areas that need it Consult on technology initiatives to provide industry best-practice as a baseline for security observability and detections Analyse business impact and exposure based on emerging security threats, vulnerabilities, and risks Participate in the implementation of security controls and measures to protect our network and systems Stay current with emerging security threats and technologies Perform risk analysis to find any vulnerability that can have an impact on the company Generate improvement strategies for better company security

Equal Opportunities

We are passionate and committed to our people and go beyond the rhetoric of diversity and inclusion. 

You will be working in an inclusive environment and be encouraged to bring your whole self to work. We will do all that we can to help you successfully balance your work and homelife. As a growing business we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. It’s talent that matters to us and we encourage applications from people irrespective of their gender identity, race, sexual orientation, religion, age, disability status or caring responsibilities.

#LI-Remote

#LI-SL1



  • London, United Kingdom JPMorgan Chase & Co. Full time

    Senior Cyber Detection Engineer – Cloud Technical Lead You will be one of the team's subject matter experts on SIEM as well as cloud technologies. You will help mature how JPMC utilizes multiple SIEM solutions (primarily Splunk) for various use-cases within Cyber Operations. The ideal candidate will be someone with previous SOC and cloud experience who...


  • London, United Kingdom Stellar Cyber Full time

    Stellar Cyber is a fast-growing Cybersecurity company focused on delivering holistic cyberattack protection to organizations while significantly reducing total costs of ownership with its innovative Open XDR (eXtended Detection and Response) platform based on advanced ML and security technologies. To accelerate our growth, we are seeking a talented Head of...


  • London, United Kingdom JPMorgan Chase & Co. Full time

    Senior Cyber Detection Engineer – Cloud Technical Lead You will be one of the team's subject matter experts on SIEM as well as cloud technologies. You will help mature how JPMC utilizes multiple SIEM solutions (primarily Splunk) for various use-cases within Cyber Operations. The ideal candidate will be someone with previous SOC and cloud experience...


  • London, United Kingdom JPMorgan Chase & Co. Full time

    Senior Cyber Detection Engineer – Cloud Technical Lead You will be one of the team's subject matter experts on SIEM as well as cloud technologies. You will help mature how JPMC utilizes multiple SIEM solutions (primarily Splunk) for various use-cases within Cyber Operations. The ideal candidate will be someone with previous SOC and cloud experience who...


  • London, United Kingdom Tech Pursuit Full time

    **Cyber Security Lead/Lead Engineer - Permanent - £70,000 to £80,000** We have an exciting opportunity for a Lead Cyber Security Engineer to join a global retail company. You will play a key role in supporting, designing and developing tooling that ensures they are protected against cyber security threats. Supporting new projects & initiatives, this role...


  • London, United Kingdom JPMorgan Chase & Co. Full time

    You will be one of the team's subject matter experts on SIEM as well as cloud technologies. You will help mature how JPMC utilizes multiple SIEM solutions (primarily Splunk) for various use-cases within Cyber Operations. The ideal candidate will be someone with previous SOC and cloud experience who enjoys researching TTPs and the threat landscape and...


  • London, United Kingdom Stellar Cyber Full time

    Stellar Cyber is a fast-growing Cybersecurity company focused on delivering holistic cyberattack protection to organizations while significantly reducing total costs of ownership with its innovative Open XDR (eXtended Detection and Response) platform based on advanced ML and security technologies. Stellar Cyber has been recognized by Gartner as one of the...


  • London, United Kingdom JPMorgan Chase & Co. Full time

    You will be one of the team's subject matter experts on SIEM as well as cloud technologies. You will help mature how JPMC utilizes multiple SIEM solutions (primarily Splunk) for various use-cases within Cyber Operations. The ideal candidate will be someone with previous SOC and cloud experience who enjoys researching TTPs and the threat landscape and...


  • London, United Kingdom Stellar Cyber Inc. Full time

    Stellar Cyber is a fast-growing Cybersecurity company focused on delivering holistic cyberattack protection to organizations while significantly reducing total costs of ownership with its innovative  Open XDR (eXtended Detection and Response) platform  based on advanced ML and security technologies. Stellar Cyber has been recognized by Gartner as one of...


  • London, United Kingdom TikTok Full time

    Responsibilities TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo. Why Join Us Creation is the core of TikTok's purpose. Our platform is built to help imaginations...


  • London, United Kingdom JPMorgan Chase & Co. Full time

    This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board. Job Description You will be one of the team's subject matter experts on SIEM as well as cloud technologies. You will help mature how JPMC utilizes multiple SIEM solutions (primarily Splunk) for various use-cases within Cyber Operations. The ideal...


  • London, United Kingdom GCS Full time

    The Cyber Security Specialist holds the key responsibility of safeguarding the company's vital infrastructure, intellectual assets, and customer information from evolving cyber threats, ensuring uninterrupted operations. You will adopt a proactive stance in constructing, implementing, and managing our Cyber capabilities to bolster our defences,...


  • London, United Kingdom GCS Full time

    The Cyber Security Specialist holds the key responsibility of safeguarding the company's vital infrastructure, intellectual assets, and customer information from evolving cyber threats, ensuring uninterrupted operations. You will adopt a proactive stance in constructing, implementing, and managing our Cyber capabilities to bolster our defences, utilizing...


  • London, United Kingdom GCS Full time

    Job DescriptionThe Cyber Security Specialist holds the key responsibility of safeguarding the company's vital infrastructure, intellectual assets, and customer information from evolving cyber threats, ensuring uninterrupted operations. You will adopt a proactive stance in constructing, implementing, and managing our Cyber capabilities to bolster our...


  • London, United Kingdom GCS Full time

    The Cyber Security Specialist holds the key responsibility of safeguarding the company's vital infrastructure, intellectual assets, and customer information from evolving cyber threats, ensuring uninterrupted operations. You will adopt a proactive stance in constructing, implementing, and managing our Cyber capabilities to bolster our defences,...


  • London, United Kingdom GCS Full time

    Job Description The Cyber Security Specialist holds the key responsibility of safeguarding the company's vital infrastructure, intellectual assets, and customer information from evolving cyber threats, ensuring uninterrupted operations. You will adopt a proactive stance in constructing, implementing, and managing our Cyber capabilities to bolster our...


  • London, United Kingdom McGregor Boyall Full time

    **Permanent role** **£85 - £95k per annum** **Hybrid home/office model** **Sponsorship -NOT AVAILABLE** **The company** A global metal trading firm. **The role** The Cyber Offence Team Lead runs a team that focus on offensive cyber security services whilst working closely with peers within the Information Security function and stakeholders across...


  • London Area, United Kingdom GCS Full time

    The Cyber Security Specialist holds the key responsibility of safeguarding the company's vital infrastructure, intellectual assets, and customer information from evolving cyber threats, ensuring uninterrupted operations. You will adopt a proactive stance in constructing, implementing, and managing our Cyber capabilities to bolster our defences, utilizing...


  • London Area, United Kingdom GCS Full time

    The Cyber Security Specialist holds the key responsibility of safeguarding the company's vital infrastructure, intellectual assets, and customer information from evolving cyber threats, ensuring uninterrupted operations. You will adopt a proactive stance in constructing, implementing, and managing our Cyber capabilities to bolster our defences, utilizing...


  • London Area, United Kingdom GCS Full time

    The Cyber Security Specialist holds the key responsibility of safeguarding the company's vital infrastructure, intellectual assets, and customer information from evolving cyber threats, ensuring uninterrupted operations. You will adopt a proactive stance in constructing, implementing, and managing our Cyber capabilities to bolster our defences, utilizing...