It Security Engineer

SECURITY ENGINEER - Hybrid - Contract

North West

Web application experience and knowledge of tools an advantage as is being able to understand logs and python for automation. As always monitoring and response experience will help but the right investigation mindset is most important, the ability to learn quickly and being a good team fit/team player.

Resource will function as a member of an enterprise network application layer intrusion, detection, prevention, and response team. Will develop and implement custom alerts and monitoring controls to detect and mitigate threats. Provides leadership in assessing new threat vectors and designing and implementing effective controls. Leverages advanced investigative skills using best in class data correlation and log analysis tools. Will partner with senior leaders from lines of business organizations to triage security events and report on impacting security initiatives. Develops and implements processes or controls in support of audit and risk requirements.

Required Skills:

• Strong Intrusion Analysis background. Resource must be able to identify and interpret web an application logs from a security perspective.
• Strong Splunk skill set. The security analyst will leverage Splunk to analyse logs and other security events including creating macros, alerts, and dashboards to find targeted attacks against network based bank assets.
• Knowledgeable of current exploits. Resource must be able to identify common exploits from the appropriate web and event logs.
• Working knowledge of Linux, Windows, and MacOS operating systems.
• Comfortable with scripting languages and regular expressions.
• Strong knowledge common network protocols.
• Working knowledge of enterprise Client / Server architecture.

We are a front line

team that handles active security events and current threats. On-call and after

hours work can be expected although we rotate to approximately one week every 2

months.

The analyst will use

new intelligence to update existing controls to detect new threats against the

bank. Will be expected to have solid technical skills to operate independently

and to support others within the security team.

Desired Skills:

• Able to interpret Apache web logs, IIS, Active Directory and other security logs.
• Full understanding of modern web site deployments and technology.
• Familiarity with web application attacks including SQL injection, cross-site scripting, and remote file inclusion.
• Understanding of stateful firewalls and able to interpret firewall rules.
• Use tools to detect anomalous/malicious data transmissions on the network.
• Use advanced analytics / security tools to detect anomalous events on the network.

Job Title: It Security Engineer

Location: Chester, UK

Job Type: Contract

Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at https://www.allegisgroup.com/en-gb/privacy-notices.

To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to https://www.allegisgroup.com/en-gb/privacy-notices.

We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at https://www.allegisgroup.com/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.