Cyber SecOps Specialist

at  eonnext

Bringing that feel-good energy.
We’re the newest face amongst the E.ON group of companies. E.ON Next is all about creating a sustainable future, now. We’re moving our energy in the right direction, one little big step at a time. Join us in our mission to bring feel-good energy.
We’re also here to make this whole energy thing way easier for our customers. Like, really easy. That means providing exceptional service and using state-of-the-art tech to do it.
We’re looking for an enthusiastic Cyber SecOps Specialist to join our E.ON Next team. As a Cyber SecOps Specialist you’ll be working in a complex multi-supplier environment to deliver a robust set of controls which manage the cyber security risks and security requirements of E.ON Next. Customers are at the heart of what we do, and so is the security of their information. If you’re an advocate of cyber security with a passion for new technology, then we want to hear from you!

A taste of what you’ll be doing:

• Working with senior stakeholders, peers and colleagues to promote a strong culture of security
• Managing security risks and controls - including the security compliance, certification and accreditation of suppliers
• Monitoring and assuring E.ON Next’s technology environment
• Supporting internal and external auditing and reporting on cyber security compliance including Smart Metering and PCI DSS
• Developing and improving security architectures and processes
• Performing threat hunting activities to proactively identify and mitigate risks
• Identifying and implementing improvements to security monitoring tools and processes
• Analysing security trends and threat intelligence to inform monitoring strategies
• Scoping and managing penetration tests and their outputs
• Working with our amazing Tech teams to prioritise and address vulnerabilities

Are we the perfect match?

We understand that these lists can sometimes be a bit intimidating and we don’t mean it to be like that. If you get what we’re on about here, send us your CV. We would rather chat through your experience than put you off because you don’t tick every one of these boxes.

• Credibility and presence at a senior level
• Strong understanding cyber risks / threat modelling in a modern technology environment
• Demonstrable subject matter expertise in at least two of the following: PCI-DSS, ISO27001, ISO27005, ISO22301, Data Protection Act / GDPR
• Degree level Information Security or equivalent experience
• Professional security qualification, e.g. CISM or CISSP
• Ability to build relationships and deliver on a matrix management basis, often across geographic/cultural/procedural boundaries
• Strong understanding of cloud technologies (esp. AWS, GCP), networking concepts, server/desktop, hardware/software.

It would be great if you had:

• Understanding of cloud security tools such as Splunk, Wiz.io
• Experience working with the Smart Energy Code, especially section G
• Experience working in a DevSecOps environment

A taste of what you’ll be doing:

• Working with senior stakeholders, peers and colleagues to promote a strong culture of security
• Managing security risks and controls - including the security compliance, certification and accreditation of suppliers
• Monitoring and assuring E.ON Next’s technology environment
• Supporting internal and external auditing and reporting on cyber security compliance including Smart Metering and PCI DSS
• Developing and improving security architectures and processes
• Performing threat hunting activities to proactively identify and mitigate risks
• Identifying and implementing improvements to security monitoring tools and processes
• Analysing security trends and threat intelligence to inform monitoring strategies
• Scoping and managing penetration tests and their outputs
• Working with our amazing Tech teams to prioritise and address vulnerabilitie

We understand that these lists can sometimes be a bit intimidating and we don’t mean it to be like that. If you get what we’re on about here, send us your CV. We would rather chat through your experience than put you off because you don’t tick every one of these boxes.

• Credibility and presence at a senior level
• Strong understanding cyber risks / threat modelling in a modern technology environment
• Demonstrable subject matter expertise in at least two of the following: PCI-DSS, ISO27001, ISO27005, ISO22301, Data Protection Act / GDPR
• Degree level Information Security or equivalent experience
• Professional security qualification, e.g. CISM or CISSP
• Ability to build relationships and deliver on a matrix management basis, often across geographic/cultural/procedural boundaries
• Strong understanding of cloud technologies (esp. AWS, GCP), networking concepts, server/desktop, hardware/software