It Infrastructure Engineer

I am supporting a leading cyber security company, based on The South Coast as they undergo expansion in 2024.

As part of this expansion, they are looking for an IT Infrastructure Engineer with a specialized focus on project delivery and ransomware recovery. In this role, you will be instrumental in ensuring the security and integrity their clients' digital assets by actively contributing to the development and execution of robust cybersecurity strategies.

Reporting to the Security Operations Head of Service, you will be a key player in their UK-based incident response team.

Duties:

This role would be suited to both candidates who wish to work from the Head Office in Poole or those that prefer the hybrid work set up with 2 days per week in the office. The IT Infrastructure Engineer will focus on project delivery and ransomware recovery and work closely with Digital Forensics, performing various tasks to manage and maintain customers cyber security. It is critical that an candidates understand the reactive nature of this role and are prepared to work overtime to ensure they are available and responding to threats as they occur. Key responsibilities include:

Incident Response and Analysis:

• Investigate and respond to security incidents promptly and effectively.

• Perform in-depth analysis of security events to understand the scope, impact, and root cause of incidents.

Security Monitoring and Incident Detection:

• Monitor security information and event management (SIEM) tools and other security monitoring systems.

• Identify potential security incidents and anomalies.

• Analyse alerts and log data to assess the severity and impact of potential threats.

Threat Hunting:

• Proactively search for hidden threats and potential security weaknesses.

• Utilize various security tools and methodologies to identify and address potential vulnerabilities before exploitation.

Vulnerability Management:

• Assist in vulnerability assessments and penetration testing activities.

• Evaluate and prioritize identified vulnerabilities for remediation.

Security Reporting and Documentation:

• Create detailed reports on security incidents, response actions taken, and recommendations for improvement.

• Maintain accurate records of incidents, investigations, and security-related activities.

Security Tools Management:

• Configure, update, and maintain security tools, including firewalls, intrusion detection/prevention systems, endpoint protection, and SIEM solutions.

Who?

Successful candidates will undergo a comprehensive training and certification program across the service portfolio. Whilst I would be interested in hearing from candidates at all experience levels, prior experience within cyber security is beneficial. The following certifications and experiences will be advantageous:

• Experience in an IT Support/MSP support role.

• Experience in IT project delivery

• Certification in Microsoft Azure / Server OS.

• Certification in Fortinet Firewall, FortiSIEM, FortiEDR beneficial.

• Understanding of cybersecurity principles, networking concepts, and various operating systems.

• Knowledge of common security threats, attack vectors, and mitigation strategies.

• Excellent communication skills to convey technical information to both technical and non-technical audiences.

• Strong attention to detail and the ability to work under pressure in a fast-paced environment.

You will be joining a sucessful organisation who places employees at the heart of the organisation. Your personal passion for technology and continuous learning will be pivotal in your success in Cyber Security. A comprehensive training plan and real-world experience will be provided.