Cyber Defence Engineer

Start Date: ASAP - We can accommodate a reasonable notice period

Contract Length: 6 -12 months + Extension

Location: On-site in Hereford

Pay: £700 - £900 per day inside the IR35.

I am working with a leading global consultancy that is looking for a Cyber Security Engineer that holds active DV Clearance to lead a project in their security operations center.

Ideally, we are looking for someone who would be able to start this project as soon as possible, however, we can accommodate a reasonable notice period.

Role Description:

Cyber Defence Engineer will join a growing security team responsible for the testing, implementation, deployment, maintenance, configuration and troubleshooting of the SOC's technology stack (hardware and software). The engineer will also assist with the continued development and maintenance of data pipelines and signature updates and the professional development of the system engineering team.

Your role

* Perform system administration on specific cyber defence applications and systems to include installation, configuration, maintenance, troubleshooting, backup and restoration.

* Manage system/server resources including performance, capacity, availability, serviceability, and recoverability.

* Diagnose and resolve customer reported system incidents, problems, and events to ensure continuing operability.

* Coordinate with SOC and CTI Analysts to assist in the development of signatures which can be implemented on cyber defence network tools in response to new or observed threats within the network environment or enclave.

* Manage the compilation, cataloguing, distribution, and retrieval of data from a range of enterprise networks and data sources.

* Implement data management standards, requirements, and specifications.

* Analyse data sources to provide actionable recommendations and facilitate data-gathering methods.

* To share knowledge, skills and experience, create and improve documentation, and train new members of the data engineering team.

Your knowledge

* Knowledge of big data technologies and ecosystems (e.g., NiFi).

* Knowledge of current market and emerging leaders in data analytical and SIEM platforms.

* Knowledge of network security implementations (e.g., host-based IDS, IPS), including their function and placement in a network.

* Knowledge of intrusion detection systems and signature development.

* Knowledge of front-end collection systems, including network traffic collection, filtering, and selection.

* Knowledge of system administration concepts for operating systems such as but not limited to Unix/Linux, IOS, Android, and Windows operating systems.

* Knowledge of cyber defence and information security policies, procedures and regulations.

* Knowledge of network security architecture concepts including topology, protocols, components and principles.

Skills/Experience

* Previous experience of Enterprise ICS/network architectures and technologies.

* Working with frameworks and technologies that support data-intensive distributed applications.

* Experience maintaining and administrating data analytical and SIEM platforms.

* Experience using host and network-based IDS/IPS

* Experience using packet capture solutions.