Cyber Security Operations Centre Technical Specialist copy

Tender description

Summary of the work Performing monitoring, analysis and recovery procedures of security technologies. Performing deep-dive incident analysis by correlating data from various sources. Undertaking targeted cyber-attack analysis and response, and coordinating incident response processes. Specialist role Cyber security consultant Expected Contract Length 12 months Latest start date Friday 1 March 2019 Who Speclialist Work With Lead a team of Tier 1 Cyber Security Analysts. Liaise with Tier 2 colleagues, the Cyber Security Operations Centre (CSOC) Manager and Deputy, CSOC Operations and DevOps Team as well as engaging key stakeholders and senior leaders. What Specialists Work On •Configuring open source toolsets •Utilising toolsets for analysis e.g. SIEMs (Splunk, ELK, Alien Vault, etc), IDS/IPS (e.g. network and host-based), NAC, FIM, DLP, vulnerability management, network monitoring, Cyber Security Case management (eg SNow). •TCP/IP protocol suite, LAN/WAN technologies, switching, routing, VoIP and Telephony technologies, firewalls and VPN, intrusion prevention systems (IPS), vulnerability assessment, patch management tools. •UNIX, Linux, Apple and Windows technologies. •Protocol analysers and analysing output. •Monitoring, analysis and recovery procedures of security technologies. •Performing deep-dive incident analysis, correlating data from various sources •Targeted cyber-attack analysis, response, and coordinating incident response processes. Skills & Experience • Have a minimum of 5 years experience in a Cybr Security Operations Centre. • Security Information and Event Management (SIEM) platforms, and Case Management • Functional experience performing monitoring, analysis and recovery procedures of security technologies • Functional experience performing deep-dive incident analysis, correlating data from various sources Work Location Soapworks, Salford, Manchester Working Arrangments Office hours 09:00 - 17:00, Mon - Fri. Security Clearance Requires active SC Level Clearance No. of Specialists to Evaluate 10 Cultural Fit Criteria • Share knowledge and experience with other team members. • Work as a team with our organisation and other suppliers. Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers 1. What level of seniority is this role? We are looking for a Tier 2 (Senior Executive Officer) Security Operations Centre Analyst. 2. What is the IR 35 status of the role? This role is outside of IR 35. 3. What is the day date for this role? £450 per day. 4. Is there a current incumbent in role? There is no incumbent in this role, it is vacant. 5. Does the specialist need to hold SC Clearance or will you put an eligible specialist through it? The specialist needs to hold active SC Clearance. 6. What is the maximum day rate for this role? £500 per day.