SecOps Engineer

Tender description

Who Speclialist Work With The specialist will work within the Infrastructure Product Group team, with other SecOps Engineers, DevOps Engineers and Security Architects. What Specialists Work On • Providing the security triage and resolution for the cloud infrastructure • Responsible for 1st line of defence activities and deliver remediation activities • Assist with deployments of security tools/services • Assist with integrating security feeds to security tooling and services • Develop, maintain and document relevant security documentation • Advise on security best practices and enforcing security and access policies • Work closely with the central security function • Review and assess all change requests • Act as first line reviewer for security requests • Perform Continuous Service Improvement Where the Work Takes Place 12 Endeavour Square, Stratford, London E20 1JN Early Market Engagement Working Arrangements 5 days in the office, A week's on-call duties (rota based) will be paid an additional 6th day. On-Call is not currently in place, but will start in the next few months, Work Location 12 Endeavour Square, Stratford, London E20 1JN Security Clearance SC cleared, or willing to undertake clearance procedure while in the role. Additional T&Cs Skills & Experience 3+ years proven RedHat Enterprise Linux experience, or RHCE certified RHEL7 - Provide specific examples 2+ years experience with SELinux - Provide specific examples 3+ years experience securing AWS for large enterprises, AWS Certified in Security Speciality 3+ years hands on experience with Chef/Ansible/Puppet scripting - Provide specific examples 3+ years as a security analyst managing security incidents in cloud estates - Reflected in work history 2+ years experience working on security programmes to address risks including patching, secure build, vulnerability scanning and remediation, logging and monitoring, threat management and user awareness. 2+ years experience with data analysis – extracting information from large sets of data to correlate security events and to tune alerting policies within a SIEM tool. (eg. Splunk, Qualys Knowledge of security standards and frameworks; ISO 27001/2, NIST, PCI DSS, etc. - Provide specific examples Nice to Haves Experience with migrating to cloud platforms such as Amazon Web Services Experience using dev tools (Git, Jenkins, Nexus) No. of Specialists to Evaluate 15 Cultural Fit Criteria Willing to take ownership of incidents, not only resolve them, but to prevent incidents in the future Work as a team with our organisation and other suppliers Knowledge share and provide on the job training to your colleagues Collaborative and communicate to colleagues with respect Positive attitude and supportive of a no-blame culture where the personal drive is all about continuous improvement Assessment Method Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers Budget range £925/day (excluding vat)