JD

• Provide initial investigation of security incidentsProvide communication and escalation throughout the incident per the Incident Response processCommunicates directly with data asset owners and business response plan owners during high severity incidentsHunting for suspicious anomalous activity based on data alerts or data outputs from various toolsets like SIEM, EDR etc.Perform analysis of log files Provide first responder forensics analysis and investigationDrives containment strategy during data loss or breach eventsTriage and resolve advanced vector attacks such as botnets and advanced persistent threats (APTs)Works directly with data asset owners and business response plan owners during high severity incidentsTuning of IDS, proxy policy, in-line malware tools based on threat feeds, trust and reputation data, incidents, or vulnerabilities and exploits of downstream systemsProvide tuning recommendations to administrators based on findings during investigations or threat information reviews
• 
  
• Strong Analytical and Problem-Solving Skills * Knowledge of network security zones, Firewall configurations, IDS policies * Knowledge of systems communications from Layer 1 to 7 * Experience with Systems Administration, Middleware, and Application Administration * Experience with Network and Network Security tools administration * Knowledge of log formats and ability to aggregate and parse log data for syslog, http logs, DB logs for investigation purposes * In-depth experience with log search tools such as Splunk, usage of regular expressions and natural language queries * In-depth knowledge of packet capture and analysis * Experience with Security Assessment tools (NMAP, Nessus, Metasploit, Netcat etc.) * Experience with EDR tool to carry out incident detection and response. * Ability to create a containment strategy and execute

Job Type: Temporary
Contract length: 6 months
Pay: £400.81-£410.44 per da

Please refer the Job description for details