Role Summary/Purpose
The Senior Cyber Security Engineering Analyst (Endpoint /Engineering Security SME) to provide strong subject matter expertise within the component area of Endpoint Management (Antivirus/DLP, endpoint security and Forensics), including, Disk Encryption, Anti-Malware, Device and Application Control, event collection & monitoring and SIEM platform guidance methodologies.
Essential Responsibilities/Qualifications
1. Proven track-record in a similar role .
2. Be responsible for Endpoint Protection related designs and deployments across the projects enterprise systems.
3. Bring Strong subject matter knowledge in relation to Endpoint Protection / Security including, but not limited to, Encryption techniques, Event monitoring, Anti-Malware and Endpoint protection software, (Trellix product experience as additional advantage) .
4. Strong subject matter knowledge in relation to SIEM tool configuration, logging, alerting and monitoring.
5. Strong knowledge of forensics tools, (Axiom product experience as additional advantage)
6. Demonstrable subject matter knowledge in at least one of the core Endpoint Security products within the scope of the MM contract, i.e., Encryption techniques, Event monitoring, Anti-Malware & Endpoint Protection tooling.
7. A working knowledge of the management / fault rectification of recent product versions in relation to the subject matter field.
8. Experience communicating across multiple stakeholder levels including End users, Suppliers & IT leadership.
9. Experience supporting the audits such as cyber essentials. (Experience supporting the CE/CE+ experience as additional advantage)
10. Ability to author design and process documents related to Endpoint Protection.
11. Ability to create and maintain technical documents, such as operational support guidelines, policies, and procedures.
12. Stay current and follow UK Cyber Security and UK Compliance policies, processes, and strategies.
13. Must be willing to work out of Rugby, UK site (subject to COVID regulations and customer requirements).
14. Security Clearance level Restrictions apply.
Desired Characteristics
1. Experience with HMGSPF, JSP 440, JSP 490, NCSC ten steps to cyber security, MOD Cyber Security Directives.
2. Any relevant Cyber security certifications (SANS, ISACA, ISC2, SSCP, CISSP, GIAC, CISA, CISM)
3. Quickly able to technically analyses, diagnose, and resolve incidents and requests.
4. Customer first delivery. Resolve issues with a desire to ensure that IT infrastructure remains secure and compliant.
5. Good understanding of networks and Domain Structure.
6. Experience with HLD,LLD development from a security engineering prospective.
7. Should have knowledge & experience of implementing Security Controls & Configuration of Network appliances. (Routers, Switches, Firewall)
8. Working knowledge & experience of Tenable SC. (Vulnerability Management, Scanning, Remediation)
#J-18808-Ljbffr