Senior SecOps Analyst (focus on automating security compliance checks and controls)

Tender description

Summary of the work Platform improvement and optimisation, incident management, and on-call duties (additional pay) Specialist role Cyber security consultant Expected Contract Length 12 months Latest start date Friday 1 February 2019 Maximum Day Rate £925/day (excluding VAT) Who Speclialist Work With The specialist will work with the Infrastructure Product Group team, which consists of other DevOps Lead, DevOps engineers, team manager, and SecOps engineers. What Specialists Work On Support and maintain a cloud estate (AWS) and enforce best practice security principles to manage risk. Furthermore, automate security controls (detective and preventative) in an enterprise environment. Skills & Experience • 3+ years RedHat Enterprise Linux experience, or RHCE certified RHEL7 • 2+ years experience with SELinux • 3+ years enterprise securing AWS for large enterprises, or AWS Certified Security • 3+ years Chef/Ansible/Puppet scripting experience, or software development background in Ruby/Python • 3+ years as a security analyst managing security incidents in cloud estates • 2+ years as a security architect design and implementing security solutions • Experience using monitoring tools (Splunk, DataDog, Qualys) • Experience in security hardening IaaS and PaaS Nice to Haves • Proven experience of implementing cloud security best practices • Experience using dev tools (Git, Jenkins, Nexus) • Experience in architecting a immutable CI/CD pipeline with audit trails • ITIL Foundation certified Work Location 12 Endeavour Square, Stratford, London E20 1JN Working Arrangments 5 days in the office, A week's on-call duties (rota based) will be paid an additional 6th day. Security Clearance SC cleared, or willing to undertake clearance procedure No. of Specialists to Evaluate 10 Cultural Fit Criteria • Willing to take ownership of incidents, not only resolve them, but to prevent incidents in the future • Work as a team with our organisation and other suppliers • Knowledge share and provide on the job training to your colleagues • Collaborative and communicate to colleagues with respect • Positive attitude and supportive of a no-blame culture where the personal drive is all about continuous improvement Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers 1. Can the authority please confirm the IR35 status of this requirement? The supplier shall warrant that any proposed resource falls outside the scope of the intermediaries legislation (also known as IR35). The FCA reserves the right to use HMRC’s online employment status tool to confirm that status of the resource and will not award the contract if IR35 applies. 2. Can the authority please confirm if there is a current incumbent for this role? There is no incumbent. This is a new vacancy due to increased workload. 3. Hi, is there any preference for person holding valid SC clearance or will all the candidates be considered at par without having any preference for the existing SC clearance holder? All candidates will be considered equally. Non SC holders will need to able to qualify for SC clearance. 4. What is the earliest date the successful Senior SecOps analyst start? 2nd January 2019. 5. Are you looking for a consultant with domain experience in the essential skills or do you need a hands-on engineer? A hands-on engineer is required. 6. Please advise whether this is a new role or is there are incumbent in place? There is no incumbent. This is a new vacancy due to increased workload.