Detection Team Engineer, NEC Software Solutions

• Excellent understanding of core systems, including all versions of Windows Client / Server and Hypervisor technologies (ESXI, Hyper-V etc)
• Operation of SIEM / XDR solutions
• Managing enterprise Anti-Virus and Malware platforms
• Basic networking fundamentals (i.e. DNS, DHCP, routing and firewall rules)
• Basic Red Hat Linux (RHEL) / Oracle Linux knowledge
• Someone who enjoys taking on new challenges and has the desire to learn new skills and technologies
• Great communication skills
• Analytical / Strong problem-solving skills
• Works well within a team, with the ability to work independently when required
• Extensive hands-on experience with a variety of technologies and appliances, particularly SIEM, WAFs, PAM, Windows, Linux, and hypervisor platforms
• Public cloud awareness and ideally practical knowledge of maintaining a secure public cloud
• Knowledge of UK government cyber security guidance is desirable
• Proficiency in securing, auditing, and maintaining public and cloud implementations
• Experience managing enterprise security products, including Anti-Virus, Data Loss Prevention tools, Endpoint Protection, and Identity Management
• Strong understanding of the attack chain, advanced persistent threats and the evolving threat landscape
• Ability to perform controlled malware analysis and scripting on Windows and Linux platforms is advantageous
• Minimum of five years' experience in systems infrastructure, security operations, or senior IT support roles
• Previous experience in a Security Operations Centre (SOC) or as part of a Security Team is desirable
• A strong commitment to continuous learning, developing new skills, and sharing knowledge, including dedicating study time outside of working hours for career advancement
• Excellent team working skills with clear and professional communication, coupled with a customer service-oriented approach
• Self-motivated with the ability to work independently and deliver high-quality results
• Must possess or be eligible to obtain security clearance to MOD SC and Non-Police Personnel Vetting Level 3 (NPPV)

Desirable

• We are seeking to appoint an energetic Cyber Security Engineer, based out of the UK, to join our InfoSec Detection Team
• As a member of this team, you will report directly to the Detection Team Lead and provide valuable security guidance, threat hunting and incident response capabilities as well as enforce security best practices throughout NEC
• In this role, you will collaborate closely with the Detection Team, Response Team, and Architects within the group
• Your responsibilities will involve a diverse range of duties aimed at developing and maintaining NEC security posture, in line with government guidance and our accreditations
• Drawing on your comprehensive understanding of the threat landscape, you will leverage your expertise to advise on, investigate and remediate complex security risks and issues across the business, with a strong focus on root cause analysis (RCA)
• Collaborate with Detection Team, Response Team and Architects to identify, assess, and conduct in-depth investigations on areas of interest highlighted through our various reporting mechanisms such as XDR, SIEM, Proxy solutions, Email Threat platform, Application Delivery Controllers (ADCs), Vulnerability Scanning Solutions and Security Bulletins
• Monitor and investigate security events and alerts, prioritising risk and taking necessary actions to promptly remediate operational security risks
• Support investigations and incident response scenarios as directed by the Team Lead
• Learn and contribute to the maintenance and development of our Privileged Access Management (PAM) platform: requires some knowledge of XML, Python and RegEx
• Work closely with Security Architects to deliver new security capabilities and ensure ongoing security enforcement and compliance
• Familiarise yourself with ITIL processes, including change, problem, and incident management
• Maintain the NCSC's Cyber Security Essentials Plus accreditation
• Please note - this role can be Hybrid or Remote, subject to location

• Pre-employment checks required:
• Baseline Standard and Disclosure Scotland (BPSS)
• On employment the candidate must be able to achieve and maintain Security Clearance
• Candidates must be able to demonstrate a pre-existing right to work and travel within the EU. Documentary evidence will be requested at interview
• A Basic Disclosure will also be required