WP1343: Security Operations Engineer

Tender description

Summary of the work Working to deliver alpha security tooling: Monitoring, Threat Intelligence. Scaling of our engineering capabilities. Specialist role Cyber security consultant Expected Contract Length 18 weeks Latest start date Monday 26 June 2017 Maximum Day Rate £650 (Excluding VAT) per day Early Market Engagement None Who Speclialist Work With You will be working within a core team of security specialists including: security engineers, security architect, security operations, security analyst, security intelligence anlyst, ethical hacker. The wider 'matrix managed' team that is made up of tech architects, developers, user support managers, product managers, delivery managers and the Enabling Delivery and Support team. What Specialists Work On Monitoring, Threat Intelligence. Scale our engineering capabilities by taking on business as usual work: - managing our internal KPI -Work with external suppliers, such as penetration testers, to ensure the integrity of the systems -Cyber Sec Ops Engineering as directed. Alpha Deliverables: - Build and deploy Security Operations environments - Build additional monitoring capability for specific products using AWS alongside existing teams - Set up monitoring on new product(s) - Perform gap analysis and build on attack trees and threat feeds for specific products. Skills & Experience • At least 2 years Significant experience of system operational security, network and/or application security • At least 2 years Significant experience of system operational security, network and/or application security • At least 2 years Knowledge of system security vulnerabilities and remediation techniques • At least 2 years Analytic skills to understand security implications of technical events • At least 2 years Extensive troubleshooting and research skills with a positive and proactive approach to customer service and getting things done • At least 2 years Strong experience working in an operational role in a secure environment • At least 2 years Knowledge of network and web related protocols (e.g. TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols) • Minimum 2 years Strong scripting skills in at least one of the following is highly desirable: Ruby, Python, shell (bash, ksh, csh). Working knowledge of Java would be an advantage • At least 2 years Working knowledge of Linux Nice to Haves • At least 2 years Experience of working within a software development team/writing code • At least 2 years Experience of managing security in an environment with frequent change • At least 2 years CEH, CISSP, SANS/GIAC or CREST certifications or other security certifications • At least 2 years Technical qualification or experience in low level software, network security, malware analysis, penetration testing or vulnerability discovery and mitigation • At least 2 years penetration testing, network security monitoring or incident response experience • At least 2 years Experience supervising technical specialists • At least 2 years Experience of configuration management processes and tools - eg Puppet or Chef • At least 2 years Experience of working with IaaS Work Location Government Digital Service Aviation House, 125 Kingsway, London, WC2B 6NH until July 2017. then Whitechapel building, Aldgate, London from July 2017. Working Arrangments Onsite, co-located with the core team. There may be some need for travel to other government/third parties for reference visits - only when needed. We would like the person to start as soon as possible. The latest start date to allow for any delays in the procurement process is 26th June 2017. Security Clearance SC clearance Additional T&Cs Digital Outcomes and Specialist's Terms and conditions will apply, the only addition, if required, would be Cabinet Office T&S Policy will apply for any Supplier expenses which will need to be pre-approved by Cabinet Office No. of Specialists to Evaluate 5 Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Be transparent and collaborative when making decisions • Have a no-blame culture and encourage people to learn from their mistakes • Take responsibility for their work • Share knowledge and experience with other team members • Challenge the status quo • Be comfortable standing up for their discipline • Can work with clients with low technical expertise Evaluation Weighting Technical competence 50% Cultural fit 20% Price 30% Questions from Suppliers 1. Is this role inside or outside IR35? This role is outside IR35. The intermediaries legislation does not apply to this engagement. 2. "Does the candidate have to have active SC Clearance? Are you willing to consider someone who has Disclosure Scotland and can gain SC Clearance once onsite?" We require active SC clearance 3. As this role is 18 weeks in London, is this 18 weeks in a row from start date? Also, is it mandatory for 5 days in London for 18 weeks, or can any of the work be done offsite? Please clarify if this is full time in one location without remote working? 18 weeks in a row; while the occasional remote working / work from home can be arranged, we would expect work to be ordinarily carried out from our premises in London 4. Could you please clarify which expenses would qualify for re-imbursement under the Cabinet Office T&S Policy? "Expenses would be paid if, for example, travel to a site other than Aviation House is required.This would need to be authorised in advance by the Programme, and expenses would need to be in line with Cabinet Office Guidance."