Engineer, Cybersecurity DFIR

ICE; London; On-site; GBP 50,000 - 70,000; Full time

Job summary

ICE is seeking an Engineer for their Cybersecurity Digital Forensics and Incident Response (DFIR) team in London. The ideal candidate will defend critical financial infrastructure, utilizing advanced security analytics and incident management skills. This role requires deep networking knowledge and hands-on experience with various technologies to combat global cyber threats within a collaborative team environment.

Qualifications

• 3+ years of relevant experience.
• Deep understanding of networking.
• Hands on experience with Windows and Linux.

Responsibilities

• Distill actionable information from large data sets.
• Detect, document, investigate, and resolve security incidents.
• Design and implement preventative and corrective controls.

Skills

Security Analytics

Incident Management

Endpoint Forensics

Counter Measures

Proactive Threat Hunting

Behavioral Analysis

Intrusion Detection

Threat Hunting

Education

University degree in related discipline

Tools

Splunk

Python

PowerShell

Job description

Join to apply for the Engineer, Cybersecurity DFIR role at ICE

1 week ago Be among the first 25 applicants

Join to apply for the Engineer, Cybersecurity DFIR role at ICE

Job Purpose

The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills.

Job Description

Job Purpose

The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills.

Responsibilities

• Security Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection
• Incident Management - Detect, document, investigate, and resolve security incidents in an efficient manner
• Endpoint Forensics - Construct meaningful incident timelines from forensic artifact analysis
• Counter Measures - Ability to design and implement preventative and corrective controls to counteract emerging threats
• Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls
• Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity
• Intrusion Detection - Develop and tune network anomaly control capability to produce reliable actionable data
• Threat Hunting - Proactively search for unknown threats within the environment.
  
  

Preferred Knowledge And Experience

• 3+ years of relevant experience
• Deep understanding of networking and its application
• University degree in related discipline
• Hands on experience with Windows and Linux
  
  

Core Competencies - ICE

• Teamwork: works well with teammates locally and at remote offices; shares knowledge and is seen as someone to go to for help; contributes in weekly peer meetings
• Problem solving and decision making: demonstrates a sense of urgency; takes ownership of problems and follows temporary fixes with permanent solution; finds creative solutions
• Communication: is clear and accurate in verbal and written communication; listens to peers and supported employees; follows directions and provides useful feedback
• Professionalism: makes a positive impression in person, via phone, and electronically; models a ‘can-do’ attitude; embraces additional responsibility; refrains from office gossip or conflict; works extra hours as needed to ensure work is complete; adheres to corporate policy and encourages others to do the same
  
  

Specific Technologies: Splunk, Kabana, Bro, OpenDNS, Exabeam, Tanium, SentinelOne, Checkpoint, Palo Alto, WAF, Vectra, X-Ways, Python, PowerShell, RegEx

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Temporary

Job function

• Job function

  Information Technology

Referrals increase your chances of interviewing at ICE by 2x

Get notified about new Cyber Security Engineer jobs in London, England, United Kingdom.

London, England, United Kingdom 3 weeks ago

Greater London, England, United Kingdom 3 days ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 3 weeks ago

Greater London, England, United Kingdom 2 months ago

Security Analyst, Security Operations and Incident Response

London, England, United Kingdom 1 week ago

Product Security Engineer (University Grad)

London, England, United Kingdom 2 weeks ago

City Of London, England, United Kingdom 1 day ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 5 days ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 months ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 7 hours ago

Greater London, England, United Kingdom 2 months ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 1 month ago

Senior Information Security Engineer: £170,000 + Bonus (Elite Fintech)

Greater London, England, United Kingdom 1 day ago

London, England, United Kingdom 1 day ago

Greater London, England, United Kingdom 3 months ago

London, England, United Kingdom 4 days ago

Security and Information Security Architect

Network and Information Security Engineer

London, England, United Kingdom 2 weeks ago

Uxbridge, England, United Kingdom 1 week ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.