Cyber Defence Engineer

CONTRACTOR MUST HOLD DV CLEARANCE
Role Title: Cyber Defence Engineer
Location: Full Time onsite in Hereford
Duration: 6 Months
Rate to SSC: £500-£1000 Can be flexible on rate for the right candidate
MUST BE PAYE THROUGH UMBRELLA
Role Description:

The Cyber Défense Engineer will join our expanding security team, overseeing the testing, implementation, deployment, maintenance, configuration, and troubleshooting of the SOC's technology stack. Responsibilities include active involvement in the ongoing development and maintenance of data pipelines, signature updates, and contributing to the professional growth of the system engineering team.
Your Role:

- Conduct system administration tasks for specific Cyber Defence applications and systems, encompassing installation, configuration, maintenance, troubleshooting, backup, and restoration.

- Manage system/server resources, ensuring optimal performance, capacity, availability, serviceability, and recoverability.

- Diagnose and resolve reported system incidents, problems, and events to maintain operational continuity.

- Collaborate with SOC and CTI Analysts in developing signatures for Cyber Defence network tools in response to emerging threats.

- Oversee the compilation, cataloguing, distribution, and retrieval of data from diverse enterprise networks and sources.

- Implement data management standards, requirements, and specifications, along with developing associated policies and procedures.

- Analyse data sources to provide actionable recommendations and enhance data-gathering methods.

- Share knowledge, skills, and experience, improve documentation, and provide training to new members of the data engineering team.

Your Profile:

Knowledge:

- Proficiency in big data technologies and ecosystems, including NiFi.

- Familiarity with current and emerging leaders in data analytics and SIEM platforms.

- Understanding of network security implementations, intrusion detection systems, and signature development.

- Knowledge of front-end collection systems, system administration concepts for various operating systems, and Cyber Defence policies and regulations.

- Understanding of network security architecture concepts.

Skills/Experience:

- Previous experience with Enterprise ICS/network architectures and technologies.

- Competence in frameworks and technologies supporting data-intensive distributed applications.

- Experience in maintaining and administering data analytical and SIEM platforms.

- Proficiency in working with host and network-based IDS/IPS, packet capture solutions, and signature development.

- Ability to apply cybersecurity and privacy principles to organizational requirements.

- Capability to provide technical and service leadership to junior SOC Engineers.

Desirable Qualifications/Certifications:

- Red Hat System Administration I & II (RH124/RH134).

- Baseline Cyber Courses (e.g., Cyber Foundation Pathway, SANS SEC 301 Intro to Information Security, SANS 401 Security Essentials Bootcamp).

- Certification as an engineer in a leading data analysis/SIEM platform.

- SANS SEC501 Advanced Security Essentials Enterprise Defender.

- SANS SEC511 Continuous Monitoring & Security Operations.

- SANS SEC555: SIEM with Tactical Analytics.