This job is no longer available.
You can view related vacancies or set-up an email alert notification when similar jobs are added to the website using the buttons below.

Incident Response Manager

jk1307_1531549000
Negotiable

Managing this Role

image

Josh Keeley

Manager - Cyber Specialist 0207 759 7878

With seven years’ experience as an IT engineer within the Royal Marines, Josh has a strong ex-services network of SC and DV cleared CTI analysts and CCTIM managers. Bringing sound technical knowledge and in-depth market expertise, Josh works with consultancies, defence, MSSPs and TIPs, from rapidly-growing start-ups to established global enterprises.

 

Roles recruited: CTI analysts, CCTIM managers

Seniority: Senior

Job Type: Permanent

Geographical coverage: London

Market: Cyber threat intelligence and security operations

Incident Response Manager - London - £Competitive

We have partnered with a global Cyber Security Consultancy who are currently looking for an Incident Manager to compliment an already world class Incident Response team. This team respond to and contain security incidents for their clients with a particular focus on advanced targeted attacks.

Responsibilities

Acting as a key member of the Incident and Response team, you will coordinate and direct activity internally and for our clients in the event of a security incident to ensure it is resolved effectively and expeditiously. The Incident Manager will also assist clients with incident readiness and services intended to ensure clients develop the broader capabilities to respond to such incidents. As an Incident Manager you will be involved in:

  • Building Incident Management Plans
  • Map stakeholders and manage communications, being the focal point for all communications during incidents.
  • Define and agree governance arrangements with the client crisis management team and senior stakeholders.
  • Plan and schedule resources for the team in response to incidents.
  • Manage the sharing of secure information.

Requirements

  • Defensive security, Forensic Security or law enforcement background is ideal
  • Ability to manage time on multiple investigations, both personally and on behalf of investigators
  • A deep understanding of investigations, computer forensics and the recent cyber threat landscape
  • Broad overview of applicable legal and privacy frameworks
  • Strong communication skills and confident with stakeholders of all levels and ability to challenge constructively
  • Analytical thinking (including analysis of competing hypothesis and assessment based on limited information)
  • Ability to manage and take control in high pressure situations
  • This role will require travel and vary working hours in some instances, dependent on live Incidents.

Do you have the below qualifications? If so, what are you waiting for?

  • CREST Incident Manager (CIM)
  • GIAC Certified Incident Handler (GCIH)

Huntress Search Ltd does not discriminate on the grounds of 'protected characteristics' as defined under the Equality Act and other relevant UK legislation.

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.


This job has now been filled but you may be interested in:

 

SOC Analyst - Insurance- London

We are working with a leading Insurance group who are looking to add to their Cyber Security capability in London. The SOC Analyst will work closely with the Information Security Officer, Infrastructure team and outsourced MSSP. You will have autonomy and be looked towards to help build the Cyber capability for the UK, with a look forward to building a team in the future.

Key Responsibilities

  • Monitor Security Operations Centre (SOC) generated security events and alerts
  • Perform initial analysis to determine security events and alerts requiring immediate response and escalation
  • Triage confirmed security events and alerts, in coordination with Tier 2 and Tier 3 network and infrastructure engineers, following documented procedures
  • Develop processes and response procedures to improve overall SOC functions
  • Develop, refine, maintain, and regularly test the Incident Response Plan
  • Monitor external data sources to maintain currency of information security threat condition and determine which security issues may have an impact on the enterprise
  • Maintain both internal and external vulnerability scanning tools and report on their findings

Technical Skills

  • Strong understanding of security and network incident response protocols
  • Good understanding of malware, including APT and other emerging threats
  • Strong understanding of information security principles as it relates to system, network, internet security (i.e. ports, protocols, system hardening and system functions analysis)
  • Indicators of Compromise, understanding malware analysis, VA scanners, SIEM tools
  • Sound understanding of networking administration and troubleshooting (e.g. TCP/IP, WAN/LAN and WiFi)
  • Good understanding of firewalls and IDS/IPS systems
  • Good understanding Citrix platform
  • Good understanding of Active Directory
  • Intermediate understanding of virtualization
  • Intermediate understanding of databases (SQL in particular)

Qualifications

  • Desirable qualifications for the role include CompTIA A , CompTIA A , Network , Security , Certified Ethical Hacker (CEH), GIAC, GCIH, CISSP)

Huntress Search Ltd does not discriminate on the grounds of 'protected characteristics' as defined under the Equality Act and other relevant UK legislation.

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.

SOC Analyst

This is your chance to take the next step into a more senior position. Working as an Integral member in my clients SOC you will be able to use SIEM tools to monitor and investigate client's security environments. You will place an emphasis on vulnerability assessments and remediation.

The role

  • Analysis and investigation of alerts from SIEM and AI tools
  • Vulnerability Scanning, reporting and prioritising
  • Utilise Intrusion Prevention solutions to monitor and alert on potential breaches.
  • Creation of custom IPS signature on occasion.
  • Use packet-capture tools
  • Use Threat Intelligence Services to identify potential new threats and develop new mitigation's.
  • Working with customer security teams to detect, contain and eradicate threats.
  • An understanding of Penetration Testing.

  • You will be Analytical, Inquisitive and have a strong passion for Cyber Security.
  • You will have the ability to lead.
  • Have a passion for self development and development of your team.

This is a good opportunity to be involved in one of the fastest growing MSSP's in Central London.

You will have the chance to test and develop your skills whilst mentoring the junior members of the team.

If this role sounds like you then go ahead and apply now.

Huntress Search Ltd does not discriminate on the grounds of 'protected characteristics' as defined under the Equality Act and other relevant UK legislation.

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.

Cyber Security Analyst - London

Due to a record breaking 2018, our client, a global telecommunications organisation based in London are growing their Security Operations team.

As part of this network expansion they are looking for a Cyber Security Analysts to act as Incident Handlers and will conduct vulnerability assessments and monitor systems, networks, databases and web hosted services for potential system breaches. Report, investigate and resolve security incidents. Educate and communicate security requirements and procedures to all users and new employees.

Responsibilities:

  • The post will require rotating 24X7 shift work to include daytime, night time, and weekend work
  • Act as a first line security event analyst monitoring the SIEM tools. Monitor the alarm console; provide initial analysis of logs and network traffic.
  • Provide first line telephone, e-mail and ticket routing services for security event notifications and incident response processes.
  • Deliver first level investigation and remediation activities as a member of the Security Incident Response Team. Participate in SIRT events
  • Participate in a Compliance/Vulnerability Assessment Scanning Capability.
  • Develop mitigation and remediation plans as a result of the vulnerability assessment findings.
  • Monitor threat and vulnerability news services for any relevant information that may impact installed infrastructure. Analyze reports to understand threat campaign techniques, lateral movements and extract indicators of compromise.
  • Create and update security event investigation notes, conduct shift change reports on open cases, and maintain case data in the Incident Response Management platform.

Essential & Desirable Skills:

  • Understanding of performing 1st line analysis and interpretation of information from SOC systems; incident identification/analysis, escalation procedures, and reduction of false-positives.
  • GIAC, GCIH, GIAC , GCIA
  • Intermediate knowledge of Information Security fundamentals, technologies, and design principals.
  • Understanding or proven experience in securing Windows, Linux, Oracle and VM platforms.
  • Understanding or proven experience of SIEM tools for analysing network and security incidents.
  • Experience in Tenable Network Security Nessus, BeyondTrust Retina or similar Vulnerability Assessment scanner operations for identifying network and platform risks and mis-configurations.

Huntress Search Ltd does not discriminate on the grounds of 'protected characteristics' as defined under the Equality Act and other relevant UK legislation.

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.