-
SIEM / Incident SME
2 weeks ago
LA International Corsham, Wiltshire, United KingdomRole: SIEM / Incident SME · Contract length: 6 months initially · Day rate: Market Rate Inside IR35 · Location: Hyrbid 2/3 days onsite in either Corsham, Northallerton or Portsmouth Clearance: DV clearance required Role Description: Main Tech Skills required are ELK (Elastic, L ...
-
SIEM / Incident SME
2 weeks ago
LA International Computer Consultants Ltd Corsham, Wiltshire, United KingdomLA International Computer Consultants Ltd · Location: Hyrbid 2/3 days onsite in either Corsham, Northallerton or Portsmouth · Clearance: DV clearance required · Role Description: · Main Tech Skills required are ELK (Elastic, Logstash, Kibana) and Tanium · The Cyber role is t ...
-
SIEM/Incident SME
3 weeks ago
Trust In Soda Corsham, United KingdomJob Description · SIEM/Incident SME - DV Clearance · Start date: ASAP · Duration: 6-month contract (Extension thereafter) · Location: Hybrid working in either Corsham, Portsmouth or Northallerton (2 days in office) · Rate: £645-£750 per day inside IR35 · DV CLEARANCE REQUIRED · S ...
-
SIEM/Incident SME
2 weeks ago
Sanderson Government & Defence Corsham, Wiltshire, United KingdomSIEM/Incident SME · £#removed#/pd-Inside · Hybrid - Corsham (x2 days per week) · Looking for a SIEM/Incident SME to join a rapidly growing security team responsible for designing, delivering and maintaining operational cybersecurity capabilities. Conducting pro-active, risk-bas ...
-
SIEM/Incident SME
3 weeks ago
Sanderson Government & Defence Corsham, United KingdomJob Description · SIEM/Incident SME · £ /pd-Inside · Hybrid - Corsham (x2 days per week) · Looking for a SIEM/Incident SME to join a rapidly growing security team responsible for designing, delivering and maintaining operational cybersecurity capabilities. Conducting pro-active, ...
-
SIEM/Incident SME
2 weeks ago
eTeam Inc. Corsham, United KingdomJob Description · Role Title: SIEM/Incident SME · Location: Hybrid onsite in one of the following locations 2/3 days per week - Corsham, Portsmouth or Northallerton · Duration: 6 months · Contract Inside IR35 · CONTRACTOR MUST HOLD DV CLEARANCE · Role Description: · Main Tech Ski ...
-
SIEM / Incident SME(Need Active DV Clearance)
2 weeks ago
J&C Associates Ltd corsham, United KingdomWe are Global IT Recruitment specialist that provides support to the clients across UK, Europe and Australia. We have an excellent job opportunity for you. · Role Title: SIEM / Incident SME(Need Active DV Clearance) · Location: Hybrid onsite in one of the following locations 2/3 ...
-
DV Cleared SIEM/Incident SME
3 weeks ago
fortice Corsham, United KingdomJob Description · SIEM/Incident SME · Location: Hybrid onsite in one of the following locations 2/3 days per week - Corsham, Portsmouth or Northallerton · Duration: 6 months · MUST BE PAYE THROUGH UMBRELLA · We are heading up a recruitment drive for a global consultancy that requ ...
-
SIEM / Incident SME (DV Cleared)
3 weeks ago
Experis - ManpowerGroup Corsham, Wiltshire, United KingdomRole Title: SIEM / Incident SME · Duration: 6 Months · Location: Hybrid / Corsham, Portsmouth or Northallerton - 2/3 days per week at ONE site · Rate: £700/d - Umbrella only · PLEASE NOTE: Applicants must hold active DV Clearance to be considered for this role Would you like ...
-
SIEM / Incident SME(Need Active DV Clearance)
3 weeks ago
J&C Associates Ltd Corsham, United KingdomWe are Global IT Recruitment specialist that provides support to the clients across UK, Europe and Australia. We have an excellent job opportunity for you. · Role Title: SIEM / Incident SME(Need Active DV Clearance)nLocation: Hybrid onsite in one of the following locations 2/3 da ...
-
SIEM / Incident SME(Need Active DV Clearance)
3 weeks ago
J&C Associates Ltd Corsham, Wiltshire, United KingdomWe are Global IT Recruitment specialist that provides support to the clients across UK, Europe and Australia. We have an excellent job opportunity for you.Role Title: SIEM / Incident SME(Need Active DV Clearance)Location: Hybrid onsite in one of the following locations 2/3 days p ...
-
SIEM / Incident SME(Need Active DV Clearance)
2 weeks ago
J&C Associates Ltd Corsham, Wiltshire, United KingdomLocation: Hybrid onsite in one of the following locations 2/3 days per week - Corsham, Portsmouth or Northallerton · Main Tech Skills required are ELK (Elastic, Logstash, Kibana) and Tanium · Conducting pro-active, risk-based, protective monitoring on priority C4IS/networks to id ...
-
Computer Futures Corsham, Wiltshire, United KingdomDV Cleared SIEM/ Incident SME Analyst Corsham · Main Tech Skills required are ELK (Elastic, Logstash, Kibana) and Tanium · The Cyber role is to join a growing security team responsible for designing, delivering and maintaining operational cybersecurity capabilities. Conducting ...
-
Cyber Security Engineer
3 days ago
Jumar Solutions Corsham, Wiltshire, United KingdomCyber Security Engineer · 6 Months · Inside IR35 · 2/3 Days Per Week On-Site (Corsham, Portsmouth or Northallerton) · DV Clearance · We are looking for a DV Cleared Cyber Security Engineer to join a security team within the Military/Public Sector field who are responsible fo ...
-
Cyber Security Engineer
5 days ago
Jumar Solutions Corsham, Wiltshire, United KingdomCyber Security Engineer · 2/3 Days Per Week On-Site (Corsham, Portsmouth or Northallerton) · We are looking for aDV ClearedCyber Security Engineer to join a security team within the Military/Public Sector field who are responsible for designing, delivering and maintaining cybers ...
-
Network Architect
3 weeks ago
LA International Computer Consultants Ltd Corsham, United KingdomJob Description · Network Architect · 4 Months initially (+ 12 month extension) · Location: Onsite 4/5 days in Warwick, Farnborough or Corsham. · Via Umbrella · SC Cleared · Role Description: · Virtual Network Solution Design Architect/Subject Matter Expert (SME) with experience ...
-
Hse Manager
4 weeks ago
Jonathan Lee Recruitment Bath, United Kingdom**HSE Manager · - ** · **Oil & Gas, Water & Power, Process & Industrial Sectors ** · **Competitive plus Benefits ** · We are currently working with a world class organisation who specialise in the design, manufacturing, and distribution of actuation and critical flow systems glob ...
-
Endpoint Lead
3 weeks ago
Trust In Soda Bristol, United Kingdom**Job details**: · - Posted 31 January 2024 · - Salary £500 - £550 per day + Inside IR35 - Negotiable · - LocationBristol · - Job type Contract · - Discipline Internal, DevOps · - Reference101099 · - Contact NameEnrique Cabanas Rodriguez · **Job description**: · **Endpoint Lead - ...
-
Compliance Officer
4 weeks ago
FLEETCOR Swindon, United KingdomYour role · To support the delivery of the day-to-day activities of the Compliance function within FLEETCOR in the UK and Europe, ensuring the business is appropriately supported through organized, efficient and controlled compliance activities. · What you'll be doing · - To deve ...
-
Dangerous Goods Safety Advisor
4 weeks ago
Ministry of Defence Filton, United Kingdom**Details**: · **Reference number**: · **Salary**: · - £35,290- A Civil Service Pension with an average employer contribution of 27%**Job grade**: · - Higher Executive Officer**Contract type**: · - Permanent**Business area**: · - MOD - Strategic Command - Strategic Command Safety ...
SIEM / Incident SME(Need Active DV Clearance) - Corsham, Wiltshire, United Kingdom - J&C Associates Ltd
Description
Job DescriptionWe are Global IT Recruitment specialist that provides support to the clients across UK, Europe and Australia. We have an excellent job opportunity for you.
Role Title: SIEM / Incident SME(Need Active DV Clearance)
Location: Hybrid onsite in one of the following locations 2/3 days per week - Corsham, Portsmouth or Northallerton
Duration: 6 Months
Role Description:
Main Tech Skills required are ELK (Elastic, Logstash, Kibana) and Tanium
The Cyber role is to join a growing security team responsible for designing, delivering and maintaining operational cybersecurity capabilities. Conducting pro-active, risk-based, protective monitoring on priority C4IS/networks to identify internal and external cyber-threats/attacks. This position involves a broad range of skills, including the development and mentoring of junior analysts, monitoring networks to actively remediate unauthorised activities.
Your role
• Develop and integrate security event monitoring and incident management services.
• Respond to security incidents as they occur as part of an incident response team.
• Implement metrics and dashboards to give visibility of the Enterprise infrastructure.
• Use of the SOAR platform to assist with playbook automation and case management capabilities to streamline team processes and tools.
• Produce documentation to ensure the repeatability and standardisation of security operating procedures.
• Develop additional investigative methods using the SOC's software toolsets to enhance recognition opportunities for specific analysis.
• Maintain a baseline of system security according to latest threat intelligence and evolving trends.
• Participate in root cause analysis of incidents in conjunction with engineers across the enterprise.
• Provide Subject Matter Expertise (SME) on a broad range of information security standards and best practices.
• Offer strategic and tactical security guidance including valuation requirement of technical controls.
• Be part of the CRM process
• Liaise with the SOC engineers to maintain up-to-date dashboards of security alerts, to allow the organisation to better respond to an incident.
• Document, validate and create operational processes and procedures to help develop the SOC.
• Assist in identifying, prioritising, and coordinating the protection of critical cyber defence infrastructure and key resources.
• Build, install, configure, and test dedicated cyber defence hardware.
• Support Junior Analysts to manage SOC systems.
• Previous experience of Enterprise ICS/network architectures and technologies
• Experience and knowledge of SIEM solutions; having the ability to identify use cases and their creation, their deployment and tuning.
• Experience as a mentor/coach to junior analysts
Your profile
• Previous experience of utilising the MITRE ATT&CK and Cyber Kill Chain frameworks
• Skilled in maintaining Microsoft directory services.
• Skilled in using virtualisation software.
• Knowledge of key security frameworks (e.g. ISO, NIST 800-53, , , C2M2)
• Excellent communication skills
• Experience of writing Defence/Government documentation
Desirable Qualifications:
• Broad Spectrum Cyber Course (SANS SEC401 or SEC501 or equivalent)
• SIEM Design, Architecture and Analyst Course (SANS SEC455 or SEC555 or equivalent)
• Advanced Analyst Course (SANS SEC503 or equivalent)
