SJDoS00002 - SOC Analyst

Tender description

Summary of the work As part of service improvement FCO Services have identified the need for a role to provide on boarding of new customer/services and regular reporting of activity to customers. In addition the role will provide mentoring and guidance to existing SOC team to develop/improve ways of working and use of tools. Specialist role Cyber security consultant Expected Contract Length 6 months Latest start date 01/08/2016 Maximum Day Rate Maximum £575.00 per day. Who Speclialist Work With You will be working with the SOC Analysts, Operational teams, cyber security team. What Specialists Work On • Management of the on boarding and reporting of customers systems. • Reacting to new business opportunities that come into the section • Development of on boarding processes • Development of reporting templates • Mentoring the SOC Team • Development of Policies and Procedures for the SOC Team • Creation of procedures to report incidents to customers Skills & Experience • Experience of working in a Security Operations Centre • Experience of analysing Cyber Security attacks and incidents • Management of the on boarding and reporting of customers systems • Knowledge of firewalls and intrusion detection systems • Understanding of common network services, network vulnerabilities, and network attack patterns • Experience with security assessment tools • Strong communication skills Work Location Hanslope Park, Milton Keynes Working Arrangments We expect the individual to be onsite 5 days per week. They will work closely with the SOC team and receive direction from the Head of Cyber Security. Security Clearance Minimum SC, preferably DV. No. of Specialists to Evaluate 5 Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Transparent and collaborative when making decisions • Have a no-blame culture and encourage people to learn from their mistakes Evaluation Weighting Technical competence 50% Cultural fit 20% Price 30% Questions from Suppliers 1. Outsource would like to attend the meeting on the 28th June - What time will this be held? 13:00 – 16:00 for any meetings 2. What security assessment and SIEM tools do you use? The SIEM tool is currently Huntsman. 3. What’s the technical environment? Do they require any particular type of certifications? Windows 2008, Huntsman SIEM. Monitoring Windows 2003, 2008, 2012, Windows 8.1, Windows 10, Linux.No particular certification is required. 4. Can we please arrange for a briefing call to discuss the project and business requirements? We need some clarity over the technical requirements. Yes. Briefing/Conference Call has been set for Wednesday 29th June at 14:00. Dial in details: External Access Number: 01908515999 Participant Access PIN: 0130897 5. UPDATE TO THE FOLLOWING QUESTIONwould like to attend the meeting on the 28th June - What time will this be held? The meeting set for Tuesday 28th June between 13:00-16:00 has been replaced with the conference call on Wednesday 29th June 14:00-15:00.Conference Call Dial-in details:External Access Number: 01908515999Participant Access PIN: 0130897 6. Can SC be attained after selection or this is a pre requisite before the application? Suppliers would not be excluded if they did not have the required security clearance, provided they are willing to go through the security vetting process to obtain the required security clearance.