Cyber Fusion CSIRT Lead — UK Incident Response & Forensics

ScottishPower; Glasgow; Hybrid; GBP 69,000 - 74,000; Full time

Benefits offered by this job

36 days annual leave

Share Incentive Plan

Technology Vouchers

Electric Vehicle Schemes

Cycle to Work

Job summary

ScottishPower is seeking a Cyber Fusion CSIRT Lead to oversee the CSIRT function in the UK. This role focuses on Incident Response, Event Monitoring, Digital Forensics, Red Teaming and Threat Hunting within the Cyber Fusion Centre.

You will mentor the CSIRT team, deliver new tools and processes, and collaborate with Global Cyber Security to drive hands-on security operations. A UK residency and NSV SC clearance are required, with a hybrid work arrangement and a competitive benefits package.

Qualifications

• Specialist knowledge of IT Security and Incident Response evidenced by industry qualifications (e.g. GCIH, GCFA)
• Significant experience in IT Security Operations within large/global organisations
• Experience in all elements of the Incident Response lifecycle including leading technical response
• Experience configuring and supporting security tools and services
• Experience in managing security service providers and security software suppliers
• Awareness of key legislation/regulation impacting IT Security in energy/utilities
• Experience/understanding of OT Security challenges and solutions
• Experience providing SME input into IT Security Operations Strategies and Product Roadmaps

Responsibilities

• Mentor Senior Analysts and Analysts in the CSIRT team
• Lead delivery and operation of CSIRT tools within the UK Cyber Fusion Centre
• Coordinate with Global Cyber Fusion Centre and Global Incident Response teams
• Develop and manage the UK security strategy and roadmap
• Own delivery of support models for CSIRT tools
• Manage security incidents and day-to-day security operations
• Participate in 24/7 standby rota for critical incidents
• Collaborate with OT security to integrate IT/OT security
• Engage senior stakeholders and drive security initiatives

Skills

Cyber security

Incident response

Security operations

Tool configuration

Stakeholder management

OT security

SME input to strategy

Job description

ScottishPower is seeking a Cyber Fusion CSIRT Lead to oversee the CSIRT function in the UK. This role focuses on Incident Response, Event Monitoring, Digital Forensics, Red Teaming and Threat Hunting within the Cyber Fusion Centre.

You will mentor the CSIRT team, deliver new tools and processes, and collaborate with Global Cyber Security to drive hands-on security operations. A UK residency and NSV SC clearance are required, with a hybrid work arrangement and a competitive benefits package.