Senior Security Analyst

CamlinGroupis looking forInformationSecurity Professionalsto join itsSecurityTeam. The successful candidate for this position will become part of anRSO(Resiliency,SecurityandOperations)Team.

The successful candidate can expect to join a growing teamand will report to the Information Security Officer. While being able to work closely with others,he or she will also need todemonstratethe ability to work independently.

What you'll do:

• Ensure proper monitoring and response plans are in placefor customer(AWS) environmentsto enable thetimelyand effective response to, and management of, incidents, alarms, notifications, calls,and other activities related to theRSOand new cyber threats.

• Lead the vulnerability management processto ensure that vulnerabilities are detected, escalated,and remediatedfor both the customer and corporate environments.

• Lead the Threat Intelligenceprocess, documentandreport out to key stakeholders.

• Work withEngineering,DevSecOps, Software andIT teams in relation toidentifyingandpatchingvulnerabilities.

• Develop processes,proceduresand playbooks to improve the operational effectiveness and efficiencyofthe vulnerability management process.

• Analyse lessons learned andproducethorough documentation on complex incidents focussing on the improvements that can be made to processes, playbooks, and tooling.

• Define and implement theRSOroadmap andsecuritymonitoring strategy.

What you'll need:

• At least5years ofpractical experienceleading a team of security analysts.

• Working knowledge of native AWS Security Toolchain e.g. AWS Security Hub, AWS Inspector, GuardDutyand Datadog.

• AWS Cloud Fundamentalsand/or AWS SecuritySpecialtycertificationsor equivalent.

• Canoperatein a fast-paced, global security operations environment.Be diligent, with great attention to detail, and able to cope successfully under pressure and with shifting priorities.

• Proven ability to work independently on resolving complex issues,assistedby the Information Security Manager, IT andDevSecOps.

• Excellentexperiencewith the Threat Landscape,ThreatHunting, Adversary Methodologies,Cyber DefenceandMITRE attack framework.

• Significantpreviousexperience working in a lead role in one of the following security areas:NSOC Analyst, ThreatAnalystwith the abilityto create new operational guidelines, processes, and procedures. 

• Able to script in python to deal with OS, files,and security operations requirements.

• Goodknowledge ofLinux and Windows OSvulnerabilities.

• Good knowledge ofvulnerabilities in3^rdparty libraries used in software development.

Nice to have but not essential:

• Workingknowledge of ISO 27001:2013/2022,GDPR,Cyber Essentials & Cyber Essentials Plus.

• Experience of network/switch/firewallmanagement & configuration.

• Advanced understanding and demonstrable experience of networking principles, ITarchitectureandsecurityarchitecture.

• Shift management: Managing shifts and team ina24/7 SOC environment.

• GitHubor GitLab