Classified Networks Vulnerability and Protective Monitoring Liaison Officer

at  BAE Systems

LOCATION(S): UK, EUROPE & AFRICA : UK : MANCHESTER || UK, EUROPE & AFRICA : UK : GLOUCESTER

BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.
Vulnerability and Protective Monitoring Liaison Officer (Operations – Classified)
Gloucester or Manchester based
Please note this role requires going through Enhanced DV clearance, so you must hold British Nationality and have lived in the UK for at least the last 10 years with no breaks

REQUIREMENTS:

• Significant experience of UK Government Security frameworks/regulations, such as:
• Cabinet Office Security Policy Framework;
• Joint Service Publication 440/441/490;
• Information Assurance Standards;
• Approved security products and build standards;
• Working knowledge and experience in developing and reporting performance and risk metrics (e.g., KPIs/KRIs – Status Reporting and Dashboard for senior management)
• Working knowledge and experience in leading and performing data security, data privacy discussions, reviews, and IT/security audits
• Data security or security architecture and engineering experience
• Previous security experience with cloud security environments
• Demonstrated ability to work within matrixed resources in a team environment. Possesses strong organisational, time management and diplomacy skills
• Independent tasking and project completion with little supervision is a must
• Excellent analytical and problem-solving skills as well as interpersonal skills to interact with users, team members and senior management
• Progressive experience with increasing responsibilities within Information Security Dept. (e.g., Cyber SecOps, Security Architecture & Engineering, and/or Data Security/Forensic Analysis)

DESIRABLE QUALIFICATIONS:

• Experience of UK affecting Security certifications/regulations, such as: ISO27001, NIST SP800-53 framework, Information Assurance Standards, Approved security products and build standards, Cyber Essentials Plus
• Experience in the use of security toolsets used for vulnerability scanning (Tanium), protective monitoring (Splunk and other SEIM tools), email security, cryptography, identity and access management, end user behavioural analysis, statistical anomaly detection, security log collection, collation and analysis.
• Excellent communications & MS Office skills;
• Desirable certifications include recognised security qualification such as CompTIA Network and Security + or equivalent.
• Ability to obtain Developed Vetting National Security Clearance;

ROLE SUMMARY

This role is primarily focused on the operational security support to our classified networks, role is responsible for providing technical expertise and guidance, including strategic vision, whilst also part of the team providing best practice and frameworks for IT Services within the organisation.
As a Classified Cyber Security Vulnerability and Protective Monitoring Liaison Officer, you will be focused on the Operational Security team’s responsibilities to support Classified Enterprise networks, primarily through Vulnerability and Protective Monitoring analysis, incident response and compliance.
You will have broad demonstrable knowledge and extensive technical experience across technologies / tools within the classified arena.
Please note that due to the secure nature of the job means that this is a fully onsite role, with the primary site being our Gloucester site or new Manchester offices

WHAT YOU’LL BE DOING

• Security Incident response and reporting, including Security Vulnerability and Protective Monitoring incidents across the Enterprise Classified estate.
• Security alert review for networks and solutions, effectively prioritise and escalate incidents, from Splunk, and SOC tools, as well as acting on other threat intelligence.
• The role supports the co-authoring of playbook/rules, vulnerability scanning configuration, and Incident response of alerts/reports (primarily via Splunk and other SOC tools).
• Classified network Auditing and Compliance review
• Vulnerability management (Patching, COTS & OS) assessments
• Assist with any security tasks as deemed appropriate by the Chief Security Officer or Head of Information Security
• Promote and ensure BAE Systems Behaviours
• Knowledge of industry security regulations, for example ISO27001 and ISO9001