Cyber Security Practitioner

6 months

London, Manchester, Leeeds, Bristol - hybrid 1/2 days onsite

Active SC clearance required, eligible candidates will be considered

Inside ir35

The Post

We are looking for an individual with information security and technical hands-on experience, to manage several day to day cyber security tasks in a government department, and as a member of their Cyber Security Team in the DDAT.

The successful post holder will report to the Cyber Security Architect, managing the wider technical information security function.

Technical experience in implementing and administering cyber security controls in government is essential for this role.

The post holder will be responsible for the following:-

• Assist with conducting internal audits against ICT ISO27001 and other cyber security controls deployed across the computing environment.
• Assist with the conducting of routine risk assessments of security controls.
• Review the daily logs including alerts across information security monitoring solution (Log Rhythm)
• Administer the PAM solution (CyberArk) for IT staff generating reports as directed.
• Assist with reviewing the security design and architecture of any new IT solutions being introduced within the ICT computing landscape, with the aim of identifying risks and compliance with HMG requirements.
• Experience administering Windows Back Office environments including Active Directory services,
• conducting vulnerability scanning and management activities
• Conduct basic network security investigations
• Manage the Office 365 and Azure security platforms

Essential Criteria (Key competences)

Applicant must be able to demonstrate the following skills and competences:

• Experience of administering security controls (windows Servers and other security appliances) on a medium (2,000 nodes) network
• Conducting Cyber Security Audits of technology, and processes
• Experience of conducting risks assessments utilising risk criteria (scales)
• Experience of conducting investigations of cyber security incidents, using the GLD SOC tools primarily CyberArk and Log Rhythm appliances.
• Experience implementing with NCSC Active Cyber Defence (ACD)
• Experience implementing NCSC 10 Steps to Cyber Security
• Working knowledge of and implementation of ISO27001 controls
• Experience administering the security platforms on Office 365 and Azure