Cyber Threat Specialist

Certain Advantage; Stevenage; On-site; GBP 92,000 - 111,000; Full time

Job summary

Certain Advantage is recruiting on behalf of a UK client for a Cyber Threat Operations Specialist on a 12-month contract. SC clearance is required before starting; DV clearance will be required on assignment. Location is Stevenage, onsite 5 days per week with a 07:00-15:00 or 09:00-18:00 shift.

You will join a UK SOC team to perform threat hunting, detection engineering and analysis, working with security platforms including SIEM and network capture, liaising with the InfoSec Team and suppliers.

Qualifications

• Career background in Cyber Security across IT, infrastructure and applications.
• Demonstrable experience with YARA and Sigma rulesets.
• Knowledge of IT Security methodologies and OSI model.

Responsibilities

• Support operational functions of the UK SOC and work with the UK InfoSec Team.
• Threat hunting, analysis, monitoring, reporting and investigation activities across security platforms.
• Assist incident response with escalations to embedded staff as needed.

Skills

Cyber Security

Threat Hunting

Analytical Thinking

Communication

Network Security

Security Operations

Tools

YARA

Sigma rulesets

SIEM

Network Packet Capture

IDS/IPS

Job description

Are you a Cyber Security professional with experience in supporting threat operations within organisations deemed to be part of the UK critical national infrastructure?

Certain Advantage are recruiting on behalf of a critically important client for a Cyber Threat Operations Specialist on an initial 12 month contract.

SC clearance will be required before starting but applications are welcome from candidates who don't hold it as long as you are eligible and willing to wait.

DV clearance will be required once on assignment.

Location: Stevange - Onsite 5 days per week covering a shift pattern of 07:00-15:00 or 09:00-18:00

This is a fantastic opportunity to drive a proactive ethos in an ever-changing cyber security environment providing robust threat hunting, detection Engineering and analysis within a high performing team environment.

Responsibilities:

Support for the operational functions of the UK SOC. To work with other UK SOC members, including the UK InfoSec Team and other Domains (Customer Support and Infrastructure / Information Systems).

It will cover Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best standard technologies.

As the Cyber Threat Operations specialist you'll conducts a range of analysis and assist the incident response team with investigations that need to be escalated to an embedded member of staff.

Skillset/experience sought:

• A career background in Cyber Security. Security awareness and experience in all areas of IT, primarily Network Security, Infrastructure and the secondary area being Operating Systems & Applications.
• Demonstrable experience with YARA and Sigma rulesets
• Knowledge of IT Security standard methodologies.
• Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited to DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S.
• Demonstrable experience with Security Information Event Monitoring Tools and/or Network Packet Capture tools.
• Hands on experience with IDS/IPS technologies and threat hunting activities.
• Strong analytical experience and mind-set.
• Experience within Defensive Cyber-attack methodologies and frameworks.
• Understanding of Malware capabilities, attack vectors, propagation and impact.
• Good communication skills liaising with the business and suppliers.