Cyber Defence Engineer

OVERALL SUMMARY

At Close Brothers we look to recruit individuals from all different backgrounds and encourage you to apply even if you don’t tick every box. We celebrate diversity, promote inclusivity and are open to discuss flexible work options to help you balance your work and home life.

Join Close Brothers Cyber Security Team where you will be responsible for delivering and improving high quality cyber security technology designs and solutions.  Key stakeholders include the security operations team, technology teams, and business information security officers.

The Cyber Defence Engineer will be familiar with key security technologies such as DLP, SIEM, PAM, WAF, Web and email content security, IDS/IPS, firewalls, etc.  The role holder will be able to adapt their output to the ever-changing threat and business landscape, identifying, implementing, and maintaining best practice solutions that address both current and emerging information security and compliance requirements of the organization.

The role holder must also help ensure that the Bank is responsibly addressing Cyber and IT security in accordance with both organisational best practice and regulatory requirements.

RESPONSIBILITIES

Information Security (SCTY) – Level 3

• Applies and maintains specific security controls as required by organisational policy and local risk assessments.
• Communicates security risks and issues to business managers and others. Performs basic risk assessments for small information systems.

Software Configuration (PORT) – Level 4

• Designs, verifies, documents, amends and refactors complex software configurations for deployment.
• Contributes to the selection of the software configuration methods, tools and techniques.

Specialist Advice (TECH) – Level 4

• Provides detailed and specific advice regarding the application of their specialism to the organisation's planning and operations.
• Actively maintains knowledge in one or more identifiable specialisms.

Risk Management (BURM) – Level 3

• Undertakes basic risk management activities.

Risk and Compliance

Ensure all Governance and Compliance requirements are adhered to and all reporting and reviewing activities required by the Regulatory Bodies are carried out to the standards required

WE WOULD LOVE TO HEAR FROM YOU IF YOU HAVE/ARE:

• Proven experience using a SIEM tool in a technical support capacity
• Excellent and up-to-date technical knowledge of IT infrastructure (hardware, databases, operating systems, networking devices etc) and an understanding of how they are configured
• Good knowledge of a range of cyber security tools such as EDR and FIM
• Experience using scripting languages (Python, Bash, PowerShell etc.)
• Understanding of data classification and protection of datasets
• Proven experience in configuring SIEM technologies to ingest technical feeds, baselining and parsing data to an accepted assurance level, with the end result it being used for cyber incident response
• Knowledge of designing and scoping installation of cyber security technologies SSPM, CSPM
• Proven experience working with technical stakeholders in successful partnership to deliver identified goals
• Excellent and up-to-date knowledge of IT Cloud infrastructure (AWS,Azure) and cyber security controls around them
• Good knowledge of industry data security legislations and cyber security law
• Understanding of computer forensics, unpacking malware, memory imaging and extraction
• Proven experience in using industry-standard IT technologies to report on, alert to, block and respond to cyber threat, primarily focusing around SIEM technologies
• Ability to work independently to fully formulate and assure plans and reports before escalation
• Experience working with Syslog, FTP, SCP and log parsers
• Good knowledge of MITRE ATT&CK frameworks
• Professional security qualifications e.g., ISC2, GIAC, Offensive Security, EC-Council, etc
• Vendor technology certifications e.g., Microsoft, AWS, etc

IT IS NOT ESSENTIAL BUT IT WOULD BE GREAT IF YOU HAVE/ARE:

• Experience designing and operating security technologies above
• Experience working in an IT and/or information security team for a medium/large enterprise
• Experience working in regulated environments
• CISSP

We are an inclusive organisation and committed to ensuring our recruitment process is as accessible as possible to everyone. We will make adjustments for people who have a disability or long-term condition. If you need the job description or application form in an alternative format or would like to discuss the recruitment process with us, please email us at  or request a call back.

ABOUT US

For roles offering hybrid working: At Close Brothers we support employees to balance their work life priorities and in this role you will be able to enjoy a mixture of hybrid working.

Close Brothers is a leading UK merchant banking group providing lending, deposit taking and securities trading. We employ approximately 3,000 people, principally in the United Kingdom and Ireland. Close Brothers Group plc is listed on the London Stock Exchange.