InfoSec Engineer Contract

InfoSec Engineer | Remote | £350 outside IR35 | 3-month initial assignment

We are recruiting for an Information Security Engineer to join our Architecture and Governance Team, the role will be 100% remote working but will be office based when conditions allow.

As a key member of the team, you will be the technical resource for investigating security issues within the Group and for monitoring of a range of Information Security tools such as CyberArk, CrowdStrike, Tenable.sc amongst others. The organisation maintains a largely on-premises Windows-based network of ~800 staff and has recently started to make cloud deployments to Amazon AWS and Microsoft Azure.

The main tasks will include:

• Providing technical expertise to investigate Information Security issues relating to all aspects of on premise and cloud infrastructure.
• Deploy and manage a range of Information Security tools.
• Provide accurate, informative and relevant technical assessments to the Information Security team, other IT staff and third parties.
• Support Group initiatives to improve Information Security such as Security CMMI upgrades, audit and PEN test recommendations.
• Investigate Security Incidents and provide technical resolutions either independently or with suppliers and other third parties.

As an Information Security Engineer you will have:

• A technical background in IT with appropriate qualifications and/or certifications. (Essential)
• Experience of working within the Information Security area of an IT organisation which uses the NIST security framework. (Essential)
• Experience of using tools to investigate Information Security issues such as network sniffers and vulnerability scanners etc. (Essential)
• The ability to interrogate systems such as AD, Microsoft servers and desktops, networks and applications using command line tools and the use of scripts such as PowerShell etc. (Essential)
• Experience of implementing and maintaining CyberArk privileged access management system – preferably certified. (Essential)
• The ability to work independently or with minimal supervision. (Essential)
• Strong analytical and research skills with excellent report writing and communication skills. (Essential)
• A good understanding of IT and technical information security controls such as anti-virus, anti-malware, HIDS, NIDS, HIPS, NIPS, Firewalls, Proxy Servers and DLP etc. (Essential)
• Experience of investigating and resolving security incidents in live, test and development environments. (Essential)
• Relevant security qualifications such as CISSP, CEH. (Desirable)
• Experience of using Tenable.sc formerly Nessus. (Desirable)
• Experience of implementing and maintaining CrowdStrike. (Desirable)
• Experience of implementing and maintaining Azure Security. (Desirable)
• Experience of implementing and maintaining Amazon AWS Security. (Desirable)