Address
Form of work
SalaryData Support Analyst (AWS)
- 6 month contract
- £500-650 per day
- Remote with occasional trips to London
- Inside IR35
- ASAP Start
Overall Aim: supporting the Card Data Environment’s (CDE) compliance with the Payment Card Industry Data Security Standards (PCI DSS). Providing assistance to teams ensuring technology-related activities adhere to the stipulated standards.
Main tasks:
Core tasks
1. Daily logging and monitoring. This is largely manual checks currently, needed every day of the year. To be shared amongst a team of four.
2. Be on call as part of the team rota to respond to priority alarms out of hours.
3. Maintain PCI compliance checks through monthly/quarterly/6 monthly/annual reviews of FW configs, Security accounts, Service tickets etc. Preparation for the call, running the call and documenting the minutes.
4. Manage and improve the Joiners, Movers, Leavers (JML process).
5. Manage incidents in ticketing systems (Snow) to prevent these breaching their Service Level Agreement (SLAs).
6. Updating processes and documentation.
7. Maintain and Administer System Security using the following tools:
• Multifactor Authentication (DUO),
• File Integrity Monitoring,AntiVirus,IDS (Trend Micro)
• Security scans (Tenable)
8. Log, Risk Assess and remediate any issues arising from security tools.
9. Assist in arranging, remediating, arranging access for Annual Pen tests
10. Participate in Annual PCI Compliance Audits and Audit prep.
11. Deal with Queries from CDE users (Approx 20 across 3 teams) and run a monthly call.
Key Responsibilities include:
a. Troubleshooting: assisting with troubleshooting technical issues, ensuring that solutions do not compromise the security of systems.
b. Incident Reporting Support: supporting the wider CDE team in the importance of reporting security incidents and guiding wider teams on how to report any suspected breaches or vulnerabilities.
c. Work collaboratively with other members of the team, liaising with other parts of IT and Business Areas.
d. Supporting Transformation and Transition Programmes (at times). Attending meetings and providing data inputs / MI to support wider transitional activity i.e. as the CDE operation is absorbed into the Business line.
e. Engaging with 3rd party suppliers: attending meetings (on occasion), collaborative planning to resolve issues or install new additions into the CDE. i.e. supporting Pen testing and any associated assurance activity.
f. Reporting / MI: provide input into weekly/monthly reports for PMO and Project Board
Experience Desired (non-essential but helpful):
• Good understanding of DevOps concepts.
• Experience with AWS Cloud Services including Codebuild, Code Pipeline, CloudWatch, CloudFormation, Lambda and Quicksight .
• Experience with SecDevOps security best practices and experience implementing security controls in a cloud environment including SIEM, Guard Duty, and Security Hub.
• Experience of deploying cloud platforms at scale using AWS Organisations/Control Tower.
• Understanding of Windows2019 and Linux based applications.
• Experience with AWS system manager, SSM automation AWS config.
• Knowledge with alert and monitoring tools using Cloudwatch and integration with 3rd party tools.
• Creation and communication of release notes and other design documentation.
• Understanding build and release engineering or configuration management
• Experience with source control tools (GitHub)
• Experience with configuration management and automation tools
• Understanding of Agile development, continuous deployment, and continuous integration
