Cyber Incident Recovery Engineer — Remote Support

CFC Underwriting; Greater London; On-site; GBP 50,000 - 70,000; Full time

Job summary

A prominent cyber insurance firm in London seeks a Business Resumption Engineer to support incident response teams and aid client recovery during cyber incidents. Candidates should have at least 3 years of experience in a similar role and possess strong technical knowledge, particularly with Sentinel One certification. The role involves providing hands-on remote support during incidents and requires excellent communication skills. This position offers opportunities to work with a dedicated cybersecurity team in a dynamic environment.

Qualifications

• At least 3 years' experience in a similar role.
• Demonstrable interest in cybersecurity with a good understanding of cyber security service offerings.
• Hands-on experience in Incident Response team.

Responsibilities

• Support clients during incidents with technical advice.
• Provide remote support to aid recovery of systems.
• Work with Incident Response and Threat Intelligence teams.

Skills

Technical knowledge of enterprise security best practices

Incident Response experience

Strong verbal/written communication

Knowledge of scripting languages (PowerShell, Bash)

Tools

Sentinel One Siren certification

VPN and Remote Access Solutions

Network administration

Job description

Business Resumption Engineer

Department: Global Security Services

Employment Type: Permanent - Full Time

Location: UK - London

Description

CFC responds to over 4,000 cyber incidents a year, from Business Email Compromise (BECs) investigations and Denial of Service (DoS) attacks, right through to complex ransomware extortion events targeting availability and confidentiality. With 80,000+ cyber policyholders in over 60 countries around the world, we have the largest specialist team of cyber underwriters in the London market. In order to remain at the front of this exciting market it is critical that we continue to innovate our cyber products and service offerings, as well as forensic and threat intel capabilities in-house.

As a result, we are looking to recruit a Business Resumption Engineer to support our Incident Response, Incident Management, Threat Intelligence and Managed Services teams. The role will work with clients during incidents providing technical advice, guidance and hands-on (remote) support to aid recovery of systems and services.

About the role

Strong technical (administrative/configuration/implementation/design) knowledge of the following (including certification in three or more):

• Sentinel One Siren certification required (To be completed within 1 month of employment start)
• Fundamental knowledge of enterprise security best practices
• Fundamental knowledge of enterprise network architecture
• Fundamental knowledge and experience using command line interfaces and associated scripting languages (PowerShell, Bash)
• Strong verbal/written communication with ability to effectively interact with individuals at all levels of responsibility and authority
• Practical hands-on experience working in an Incident Response team, supporting external clients

About you

• At least 3 years’ experience in a similar role.
• A demonstrable interest in cyber/cybersecurity, with an overall good understanding of cyber security service offerings.

Desirable

• SentinelOne experience
• Hands on experience securing and restoring back-ups, or troubling shooting back-up solutions
• VPN and Remote Access Solutions
• Network technologies and administration

Core Values

Love what you do:

We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.

Challenge everything:

We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.

Have fun, be good:

Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.