SC Cleared SOC Manager
Recruiter
Listed on
Location
Salary/Rate
Salary Notes
Type
This job has now expired please search on the home page to find live IT Jobs.
SC Cleared SOC Manager to be based in Gosport on an initial 3 Month contract. Experienced in managing complex Security Operations Centres and an excellent understanding of ArcSight.
Job Title - SC Cleared SOC Manager
Location - Gosport
Rate - £ Market Rates per day
Duration - 3 Month initial
Responsible for Security Operations Centre Services and Protective Monitoring System in accordance with customer security policies, standards and regulations. This is a role calling for an experienced security analyst who is used to leading a team of analysts and engineers. The SOC Team Leader is responsible for the security analysis, incident classification and incident response actions such as notification and alerting.
Monitors for possible security incidents, using knowledge of attack types and standard protocol behaviour to classify incidents, comment, and provide advice on mitigation or remedial actions to the client.
Essential Job Functions:
* Monitoring client security infrastructure, identifying and reporting real time attacks and vulnerabilities on the client network.
* Identification of incidents and subsequent analysis and investigation to determine their severity and the response required.
* Ensure that all incidents are correctly reported and documented in accordance with government policy and procedures.
* Provide a Technical Escalation Point during security incidents, establishing the extent of an attack, the business impacts, and advising on how best to contain the incident along with advice on systems hardening and mitigation measures to prevent a reoccurrence.
* Maintain a keen understanding of evolving threats and vulnerabilities to ensure the security of the client network.
* Author Protective Monitoring/SOC documentation, processes and procedures and ensure currency.
* Manage all SOC analysts and engineers.
* Provide OJT to develop junior members of the SOC team.
Technical Skills:
* Arcsight SIEM - Content creation, tuning and detection rules. (CRITICAL)
* TCP/IP.
* Windows networking environments.
* Network protocols.
* Packet analysis.
* Network and host IDS monitoring.
* Firewall architecture.
* Malware types.
* Vulnerabilities and associated threats and exploits.
Other Skills:
* Strong analytical and problem solving skills for resolving security issues, may include national security information.
* Strong organization skills to balance work and lead projects.
* Strong interpersonal skills to interact with customers and team members.
Qualifications (Desirable):
* Security related qualification such as CISSP/ISSP.
* GIAC Certified Intrusion Analyst (GCIA).
* Degree or equivalent in Computer Science or IT Security.
Candidates should submit CVs in the first instance. Mike Tripp 0161 924 3631
