Security Operations Engineer

Tender description

Who Speclialist Work With Working with Platform Engineers, and developers, tech architects What Specialists Work On • Ensuring that deployed code is secure and assured. • Ensuring Cloud infrastructure complies with security architecture and policies • Conducting or ensuring internal security testing for each Agile sprint/release • Leading/conducting code & configuration security reviews • Leading/implementing remediation activity • Vulnerability management • Liaison with Her Majesty’s Passport Office Information Assurance team to provide the required security assurances for code releases • Operational security support • Porting security (protective monitoring) log feeds to the CSOC/SEIM. • Subject matter expert on DevOps security, • Provisioning, administering and reviewing Developer user access & privileges Where the Work Takes Place Petty France, London Early Market Engagement Working Arrangements The individual will work full time from the primary office in Petty France, London five days a week. Option to work from home one day a week. Candidate should be prepared to use their own company laptop which may be needed to undertake some duties. There may be an occasional need to attend our other office in Central London (Victoria). No travel expenses will be paid for this purpose. Expenses for any exceptional travel authorised outside of Central London will fall under the Standard Government Terms and Conditions for Expenses as covered in the DOS Contract Work Location Petty France, London Security Clearance DV Clearance is required. Additional T&Cs We expect this engagement to be outside IR35, however status is assessed on a case-by-case basis. Standard Government Terms and Conditions for Expenses as covered in the DOS Contract. Skills & Experience 10+ years hands-on security experience, with a focus on endpoint, network devices, and applications. Experience with vulnerability management tools such as Nessus, Qualys, etc. Experience with SIEM tools, such as AlienVault, Splunk ES, ELK/Logstash, etc Experience with security testing tools such as BurpSuite, ZAP, etc. Understanding of secure coding development practice, e.g. OWASP Top Ten, etc. Incident Response analysis and investigations. Ethical Hacker experience Experience and working knowledge of Linux/Unix. Nice to Haves Knowledge of networking protocols and technologies, e.g. TCP/IP, Switching & Routing, etc. Recognised security qualification (e.g CREST, AWS Security, CCSP etc) Programming and scripting skills, Python, JAVA, etc. General knowledge around endpoint security, malware analysis, BYOD, etc. Have exisiting, valid DV Clearance No. of Specialists to Evaluate 3 Cultural Fit Criteria Work as a team with our organisation and other suppliers Take responsibility for their work Be transparent and collaborative when making decisions Share knowledge and experience with other team members Assessment Method Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers Budget range