Lead Cyber Consultant

A Lead Cyber Consultant works with e2e-assure customers to review and enhance their security controls and develop their cyber maturity. They collaborate with other e2e-assure teams to develop and improve our service, as well as being a subject matter expert on cyber issues.

This is a very collaborative role; you will be sharing your knowledge with colleagues as well as providing feedback to other areas of the business.

We will provide the support and guidance to enable you to develop in the role. This includes an individual, annual training budget and personal development time.

Key Responsibilities:

• As a Lead Cyber Consultant, you will act as an escalation point and lead for cyber incident investigations.
• Improving the quality of detections and response/analysis routines and playbooks. Develop security use cases to enhance the detection capabilities of the SOC including developing complex rules, dashboards, parsing and playbooks (working with the consultants and onboarding team to investigate and identify solutions). Improving the quality of our threat intelligence platform, threat indicators and assist in optimisation of threat data.
• Professional services work, such as security posture reviews including travel to meet with customers.
• Consultants provide threat assessments, customer training and awareness to progress the cyber maturity of our customers.
• Supporting the SOC with wider cyber security expertise – advising, mentoring and coaching. Focusing on improving SOC efficiency by working across the business to bring down alert volume and collaborate on improvements, train SOC staff on investigations and rule tuning.

Candidate Attributes

Essential:

• Prior experience working in a cyber security-focused role, ideally SOC or Incident Response experience.
• Experience in leading significant cyber incident investigations
• Ability to train and mentor less experienced members of the e2e-assure team.
• Experience in working with SIEM and log monitoring tools.
• Ability to provide tailored, risk-based advice based on business outcomes, impacts and priorities.
• Excellent communication skills, including the ability to explain technical and abstract issues in a simple and understandable way for non-technical people.
• Planning and organisational skills to deliver time-sensitive projects and meet deadlines.
• Self-driven work ethic, with the ability to proactively pick up work and find relevant tasks.
• Ability to successfully lead or facilitate a team to successfully complete a task.
• Experience of directly engaging with customers and wider stakeholders, including representing the business on-site with the customer.
• Interest of cyber security issues and trends, with a self-led learning ethic and a desire to understand and apply new ideas.
• Qualifications:
  • Relevant computing or cyber university degree or equivalent qualifications, such as GIAC or similar.

OR

• SANS qualifications such as SEC504 or FOR508.

Desirable:

• Sound knowledge of security and monitoring tools
• Experience using vulnerability management tools, such as Nessus or similar.
• Sound knowledge of network-based forensics and concepts.
• Familiar with host-based forensics and concepts.
• Experience of vulnerability management process.
• Experienced operating system or network administration including system hardening, Windows domain setup and maintenance (e.g. WSUS, SCCM, Group Policy, DCE) or previous experience working in an enterprise administration role.
• Experience with Cloud Hosting Platforms such as Microsoft Azure, AWS or Google Cloud Workspace.
• Qualifications:
  • Microsoft SC-200 or AZ-500 certifications.

Salary: From £70k – £100k depending on experience

Location: From home, but some travel will be required

Benefits: Contributory pension scheme, 25 days annual leave + Bank holidays (with additional for continued service), enhanced maternity/ paternity/ sick pay, Cycle to Work scheme, tech purchase scheme, Employee assistance program for mental health and wellbeing, neurodiverse support, inclusive and friendly working environment, regular team and company events

Clearance: Individuals in this role must be eligible for SC and NPPV3 clearance. This requires residency in UK for the last 5 years.

Other Information:

e2e-assure is an equal opportunities employer. We understand the importance of diversity and inclusion to the success of e2e-assure as a business and are committed to providing a diverse working environment.

After being provisionally offered a job, candidates will be DBS and background checked by a third-party, and must be willing to attain SC, DV and NPPV3 clearances (we will put you through this process). Failure to pass these checks may result in your application being discontinued.

We expect e2e-assure employees to have a high standard of personal integrity, both during and outside work time, including how they present themselves online. We may conduct background and open-source checks to verify this.

To apply for this role please send an up to date copy of your CV to Careers@e2e-assure.com

To view our full candidate and careers data policy please visit https://e2e-assure.com/candidate-privacy-notice/