Cyber Threat Operations Specialist

Line Up Aviation; Stevenage; On-site; GBP 7,026,000 - 11,710,000; Full time

Job summary

Line Up Aviation is seeking a Cyber Threat Operations Specialist on a 12-month contract, onsite in Stevenage. The role focuses on proactive threat hunting, detection engineering, and incident response within a high-performing security team.

You will work closely with the CTI and ISR functions, maintain security technologies, and support investigations and security projects. A strong background in cyber security and hands-on tooling experience are required.

Qualifications

• Career background in Cyber Security across IT, networks, infrastructure and OS/applications.
• Experience with YARA and Sigma rule sets.
• Knowledge of IT security methodologies and OSI model.

Responsibilities

• Conduct proactive Threat Hunting in collaboration with CTI.
• Lead Threat Detection Engineering with the ISR function.
• Assist with maintenance of security technologies and project activity.
• Support Incident responders with HR and InfoSec investigations.
• Attend routine security meetings.

Skills

Threat hunting

Detection engineering

Incident response

Security analytics

Network security

Threat intelligence

Tools

YARA

Sigma rules

IDS/IPS

SIEM tools

Packet capture

Job description

Our client has an opportunity for a Cyber Threat Operations Specialist to join them on a contract basis for 12 months with possible extension.

You will be supporting the Active Defence & Incident Response Manager in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive a proactive ethos in an ever-changing cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment.

Role: Cyber Threat Operations Specialist

• Location: Stevenage - fully onsite
• Hours: Shift pattern of 07:00-15:00 or 09:0-18:00 (subject to change)
• Clearance: Full SC required before starting, DV to follow. UK Eyes Only due to project
• Hourly Rate: Up to £85 per hour via Umbrella, inside IR35

What you'll be doing:

• Conduct proactive Threat Hunting in collaboration with the CTI function
• Lead Threat Detection Engineering effort working with the ISR function
• Assist with the maintenance of Security technologies
• Assisting the Cyber Eng Team with project activity
• Supporting the Incident responders with HR and InfoSec related investigations
• Attend routine security meetings

Requirements:

• A career background in Cyber Security. Security awareness and experience in all areas of IT, primarily Network Security, Infrastructure and the secondary area being Operating Systems & Applications.
• Demonstrable experience with YARA and Sigma rulesets
• Knowledge of IT Security standard methodologies.
• Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited to DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S.
• Demonstrable experience with Security Information Event Monitoring Tools and/or Network Packet Capture tools.
• Hands on experience with IDS/IPS technologies and threat hunting activities.
• Strong analytical experience and mind-set.
• Experience within Defensive Cyber-attack methodologies and frameworks.
• Understanding of Malware capabilities, attack vectors, propagation and impact.
• Good communication skills liaising with the business and suppliers.