WP1391: Security Operations Engineer

Tender description

Who Speclialist Work With You will be working within a core team of security specialists including: security engineers, security architect, security operations, security analyst, security intelligence anlyst, ethical hacker. The wider 'matrix managed' team that is made up of tech architects, developers, user support managers, product managers, delivery managers and the Enabling Delivery and Support team. What Specialists Work On Monitoring, Threat Intelligence. Scale our engineering capabilities by taking on business as usual work: - managing our internal KPI -Work with external suppliers, such as penetration testers, to ensure the integrity of the systems -Cyber Sec Ops Engineering as directed. Alpha Deliverables: - Build and deploy Security Operations environments - Build additional monitoring capability for specific products using AWS alongside existing teams - Set up monitoring on new product(s) - Perform gap analysis and build on attack trees and threat feeds for specific products. Where the Work Takes Place Government Digital Service Aviation House, 125 Kingsway, London, WC2B 6NH until July 2017. then Whitechapel building, Aldgate, London from July 2017. Early Market Engagement None Working Arrangements Onsite, co-located with the core team. There may be some need for travel to other government/third parties for reference visits - only when needed. We would like the person to start as soon as possible. The latest start date to allow for any delays in the procurement process is 26th June 2017. Work Location Government Digital Service Aviation House, 125 Kingsway, London, WC2B 6NH until July 2017. then Whitechapel building, Aldgate, London from July 2017. Security Clearance SC clearance Additional T&Cs Digital Outcomes and Specialist's Terms and conditions will apply, the only addition, if required, would be Cabinet Office T&S Policy will apply for any Supplier expenses which will need to be pre-approved by Cabinet Office Skills & Experience At least 2 years Significant experience of system operational security, network and/or application security At least 2 years Technical knowledge in security engineering, system and network security, (authentication and security protocols, cryptography), operation of a PKI, and application security At least 2 years Knowledge of system security vulnerabilities and remediation techniques At least 2 years Analytic skills to understand security implications of technical events At least 2 years Extensive troubleshooting and research skills with a positive and proactive approach to customer service and getting things done At least 2 years Strong experience working in an operational role in a secure environment At least 2 years Knowledge of network and web related protocols (e.g. TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols) Minimum 2 years Strong scripting skills in at least one of the following is highly desirable: Ruby, Python, shell (bash, ksh, csh). Working knowledge of Java would be an advantage At least 2 years Working knowledge of Linux Nice to Haves At least 2 years Experience of working within a software development team/writing code At least 2 years Experience of managing security in an environment with frequent change At least 2 years CEH, CISSP, SANS/GIAC or CREST certifications or other security certifications At least 2 years Technical qualification or experience in low level software, network security, malware analysis, penetration testing or vulnerability discovery and mitigation At least 2 years penetration testing, network security monitoring or incident response experience At least 2 years Experience supervising technical specialists At least 2 years Experience of configuration management processes and tools - eg Puppet, Ansable or Chef At least 2 years Experience of working with IaaS Minimum 2 years Dev Ops experience Must have worked in an AGILE environment No. of Specialists to Evaluate 5 Cultural Fit Criteria Work as a team with our organisation and other suppliers Be transparent and collaborative when making decisions Have a no-blame culture and encourage people to learn from their mistakes Take responsibility for their work Share knowledge and experience with other team members Challenge the status quo Be comfortable standing up for their discipline Can work with clients with low technical expertise Assessment Method Evaluation Weighting Technical competence 50% Cultural fit 20% Price 30% Questions from Suppliers Budget range £650 (excluding vat) per day