CSOC VMS Specialist at Content+Cloud

Description

The VMS Specialist role is part of the Cyber Security Operations Centre (CSOC) and sits within the Cyber Services Department of Content + Cloud.

You will be an active player within the Cyber Security Operations Centre (CSOC) using a variety of VMS, SIEM and security toolsets to meet the requirements of the business and its customers.

This is a hands-on role and requires a both a broad technical knowledge of Cyber Security, as well as specific focused knowledge of VMS tools and processes – particularly Qualys.

Although the focus is on VMS, knowledge and/or experience of modern IT systems and infrastructure is advantageous to assist with the development and continuous improvement of the security platforms within Content + Cloud and its customer’s environments.

Requirements

General responsibilities as CSOC Specialist

• Respond to client requests and liaise with them directly on security issues.

• Lead process improvement opportunities, provide solutions and lead in implementation of changes.

• Finalise draft reports submitted by SOC Analysts using Power BI, including analysis and conclusions, and deliver to clients on a monthly basis.

Specific VMS Responsibilities

• Create and manage VMS internal processes and standards.

• Product Management of Qualys, to involve scheduling and creating scans, liaising with clients to propose and implement mitigations for identified vulnerabilities, and be main POC to the Qualys TAM.

• Design and maintain VMS Key Performance Indicators. Create and deliver dashboards and regular reports to monitor metrics to assess performance against KPIs.

• Maintain the short and long term strategy for effective vulnerability management.

• Give direct support to different projects within the SOC, attending planning meetings and integrating VMS into the wider service.

• Support major incident vulnerability activities as required.

• Work with clients to resolve public facing vulnerabilities in our applications and associated infrastructure.

• Monitor open-source media for new vulnerabilities.

• Future: Technical escalation point, mentoring and training for VMS analysts.

Essential

• Demonstrable passion for cyber security.

• Ability to work independently – identify own tasks in line with the wider SOC strategy and see them through to a successful conclusion.

• Excellent soft skills in the form of team working, problem solving and communication.

• In time, the ability to lead and manage a small team of VMS Analysts (upon further development of the capability).

• Demonstrable technical knowledge, skills and/or experience in VMS tools such as Qualys.

• Working knowledge of core security and infrastructure technologies (e.g. firewall logs, network security tools, malware detonation devices, proxies, IPS/IDS)

Desired

• One or more of the following industry certifications: CEH, GCIA, GCIH, GSEC, Security+, GCTI

• Experience in secured cloud architectures (Azure, AWS) and engineering solutions

• An understanding of multiple operating systems and their programming interfaces such as UNIX Shell and PowerShell.

• An awareness of cyber security related standards and regulations, for example, NIST, CIS, ISO 27001 and PCI DSS

Benefits

• Permanent position

• Role based out of our Manchester offices with flexibility to work from home

• Working Monday - Friday, 37.5 hours per week

• 25 days’ annual leave, Pension contributions (4%), Life Insurance, Income Protection, Birthday Leave, Wedding Leave, Ride to Work scheme and Private Medical & Dental also available

• Multiple HIIT, general fitness, yoga and meditation classes run virtually each week! (In addition to other wellness events and other social activities...)

All recruitment and selection for Content+Cloud is guided by the principles of our Employment Equity Plan