WP1524 - Senior Cyber Security Analyst/Coach

Tender description

Who Speclialist Work With This is part of the Cyber Security team for GDS products. The winning supplier will be working with Devs and SecOps as well as cross-functional colleagues in GDS. They will also be working with other government departments such as GCHQ. What Specialists Work On - Train Security Analyst and Junior Analysts on the effective and proactive analysis of security logs to determine if cyber attacks are occurring against GDS. As well as training staff, we require this specialist to run service infrastructure and user transactions. - Provide subject matter expertise as a Senior Security Analyst to investigate technical security incidents across GDS. - Provide support to wider GDS for Security incidents, in line with the GDS's Incident Handling procedures. - Support the Cyber Threat Intelligence specialist in the analysis of technical threat information. - Work with programmes to remediate known and newly discovered vulnerabilities. Where the Work Takes Place Government Digital Service, The White Chapel Building, 10 Whitechapel High Street, London, E1 8QS Early Market Engagement None Working Arrangements We expect the Specialist to be on site at GDS's Whitechapel Building. Working hands on as part of the team and training members of the Cyber Security team. The core hours of the role will be 9am to 5pm but this can be discussed once the contract has started as their is some flexibilty to this. There is also scope to work from home. This role is outside IR35. Work Location Government Digital Service, The White Chapel Building, 10 Whitechapel High Street, London, E1 8QS Security Clearance SC Clearance as a minimum must already be valid before starting work and not expire during the duration of the contract. Due to the nature of the work, it is preferred the Specialist is DV cleared but this is not essential. BPSS is essential to be on site at GDS. Additional T&Cs All expenses must be pre-agreed with between the parties and must comply with the Cabinet Office (CO) Travel and Subsistence (T&S) Policy. All vendors are obliged to provide sufficient guarantees to implement appropriate technical and organisational measures so that the processing meets the requirements of GDPR and ensures the protection of the rights of data subjects. For further information please see the Information Commissioner's Office website:https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/ Skills & Experience 7 years experience in training Mid level and Junior Cyber Security Analysts 7 years experience in intrusion analysis and security monitoring experience 7 years experience of proactively investigating, analysing and mitigating/resolving security events Rounded knowledge of digital security tools and technologies, with a particular focus on monitoring, analysis and intrusion detection tools 5 years extensive experience of computer forensic and forensic readiness planning CEH, CISSP, SANS/GIAC or CREST certifications or other security certifications Technical qualification or experience in low level software, network security, malware analysis, penetration testing or vulnerability discovery and mitigation Nice to Haves Vast experience of working in government Experience of working in an Agile software development environment Experience managing cyber security in an environment with frequent change Experience of working with IaaS 2 years experience incident response No. of Specialists to Evaluate 3 Cultural Fit Criteria Your approach to data privacy and security Your approach to transferring knowledge and experience to civil servants to support learning from this engagement. Culture of taking responsibility for owning issues and resolving and problems Your approach to resolving technical and business risks or issues in a collaborative way that maximises productivity and business outcomes. Commitment to team working Assessment Method Evaluation Weighting Technical competence 65% Cultural fit 15% Price 20% Questions from Suppliers Budget range