WP1365 - SecOps Security Engineer

Tender description

Who Speclialist Work With You will be working within a core team of security specialists including: security engineers, security architect, security operations, security analyst, security intelligence analyst, ethical hacker. The wider 'matrix managed' team that is made up of tech architects, developers, user support managers, product managers, delivery managers and the Enabling Delivery and Support team. What Specialists Work On Alpha Deliverables - Build prototypes for the following secrets management problems: * Solution tailored to type of secret being stored. * SSH Key management & rotation - Develop tools for use in internal security testing - Build an AWS account management solution for specific teams consistent to GDS TechOps goals - Create Build Pipelines with push button deploy, authorisation and access control for specific teams. - Setup Egress Proxying for specific teams - Set up AWS base images Secure continuous integration and build infrastructure. Build robust security processes for these tools/services and create security awareness amongst technical teams. Where the Work Takes Place Government Digital Service Aviation House 125 Kingsway London WC2B 6NH until mid June 2017. Whitechapel building, Aldgate, London from mid June 2017. Early Market Engagement Working Arrangements Onsite, co-located with the core team. There may be some need for travel to other government/third parties for reference visits - only when needed. Work Location Government Digital Service Aviation House 125 Kingsway London WC2B 6NH until mid June 2017. Whitechapel building, Aldgate, London from mid June 2017. Security Clearance SC clearance Additional T&Cs DOS Terms and conditions will apply, the only addition, if required, would be Cabinet Office T&S Policy will apply for any Supplier expenses which will need to be pre-approved by Cabinet Office. Skills & Experience At least 2 years significant experience of application security At least 2 years technical knowledge in security engineering, authentication and security protocols, cryptography At least 2 years knowledge of system security vulnerabilities and remediation techniques At least 2 years analytic skills to understand security implications of technical events At least 2 years experience of working within a software development team/writing code At least 2 years software engineering skills, including experience building, managing and deploying modern technical systems At least 2 years working knowledge of Linux At least 2 years experience working with cloud environments Nice to Haves At least 2 years experience of managing security in an environment with frequent change At least 2 years well recognised security certifications or training At least 2 years experience with penetration testing, network security monitoring or incident response At least 2 years experience supervising technical specialists At least 2 years experience of configuration management processes and tools - e.g. Puppet or Chef At least 2 years experience of working with IaaS and PaaS cloud environments At least 2 years experience of working with PCI environments No. of Specialists to Evaluate 3 Cultural Fit Criteria Work as a team with our organisation and other suppliers Be transparent and collaborative when making decisions Have a no-blame culture and encourage people to learn from their mistakes Take responsibility for their work Share knowledge and experience with other team members Challenge the status quo Be comfortable standing up for their discipline Can work with clients with low technical expertise Assessment Method Evaluation Weighting Technical competence 55% Cultural fit 15% Price 30% Questions from Suppliers Budget range £650 (exc. vat) per day