SECURITY OPERATIONS TEAM LEADER

at  Intec Select

OVERVIEW:

Our client, a leading FTSE 8 Financial Services organisation who operate heavily within the commodities sector are looking for a Security Operations Team Leader to join their London team with remote working.
You will be responsible for the coordination of the security operations within the IT environment, ensuring timely incident response and efficient coordination between stakeholders.

EXPERIENCE REQUIRED:

Professional certifications and experience in Information Security from industry standard security frameworks, e.g. ISACA, BCS, CIPP, ITIL, Crest, ISC2, COMPTIA and key security vendors including Microsoft, Crowdstrike, Qualys, IBM.
Scripting and programming
Endpoint Detect and Response tools / Anti Virus tools/ Network traffic packet analysis / Sandboxing and malware analysis
Threat hunting methodologies
Understanding of network protocols, architectures, and components
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), and network monitoring tools
Ability to configure and manage network security devices
Proficiency in securing various operating systems, including Windows, Linux, and macOS
Knowledge of large scale security technology deployments – SIEM/SOAR/EDR/NDR
Strong understanding of leading of technical teams
Proficient in investigation of causes of incidents and seeking resolution within diverse but standardised precedents and procedures by applying operational knowledge and learnings from similar past incidents.
Coordinate and control threat hunting exercises based on threat intelligence, OSINT and general network observations.
Ability to proactively lead the development/improvement of agreed procedures and tools.

Responsible for the selection, deployment and ongoing maintenance of cyber defence related technology such as Endpoint Detect and Response, Anti-Virus, sandboxes, SIEM, SOAR and script library.
Control and coordinate the monitoring and use of cyber defence tools, managing ticket and team performance and driving efficiency where possible.
Develop Standard Operating Procedures (SOPs) and other publications to support cyber operations team in conducting their work/responding to tickets.
Respond to cyber related events and incidents and manage and coordinate cyber operations personnel during the remediation phase and post incident review phase.
Enable threat hunting through the fusion of threat intelligence and business risk and produce forecasting products around future threats.
Own, build and maintain cyber security related technologies, including basic programming and scripting.
Manage a global team of IT security operations analysts, and support their development and ongoing training.