Security DevOps

Job description

Job Description

Security DevOps

Position Description
If you’re always one step ahead of the digital game, with a fine-tuned sensitivity to systems and cyber risk, and a deep understanding of threat motivation, there’s a digital revolution underway in the UK, and it needs your help.

From public service transformation to cutting-edge commercial projects, our work has a wide reach, helping make the everyday easier, for everyone. When you start your CGI story, not only will you be improving people’s lives, you can be sure we’ll do the same for you.

And the even better news? Our friendly team will keep you inspired and will support you to do what you do best, better.

Business is transforming fast. And at CGI, you’ll be at the centre of a digital revolution. As one of the largest independent technology and business services companies in the world, we can deliver exciting opportunities for you to build your career.

Alongside a competitive salary, we offer you access to our share scheme (3% + 3% matching) making you a member not just an employee. You also have the option to benefit from private medical and dental insurance, flexible retirement options, childcare vouchers and a cycle to work scheme.

As for the future? We work as one team, and are a Top 100 employer. Be a successful part of our story and we’ll support you in taking your career anywhere you want it to go.

The CGI Security Operations team is looking to expand its team dedicated to Security Dev Ops.

The Capability Integration team sits alongside the SOC and Cyber Threat Intelligence teams in order to provide detection content that attempts to uncover evidence of the latest Tactics Techniques and Procedures used by Threat Actors.

In addition to this core responsibility, members of the Capability Integration team will assist with transitions of service into go-live as well as the development of new services used alongside the standard Protective Monitoring service offered by the SOC.

This particular role gives members direct access and training to the latest technology in the industry whilst ensuring that a regular training schedule is adhered to so that members grow into the role of an SME.

Our roles are only available if you hold or fulfil the criteria to obtain a UK Security Clearance.

Your future duties and responsibilities
- Keep abreast of evolving cyber threats and identifying new and sophisticated methods of detecting them.

- Interact with customers to gather requirements and ensure the implementation of cyber security solutions.

- Responsible for the creation of procedures, runbooks, high-level/low-level documentation, implementation of processes for managing and maintaining SIEM and its components across internal and client environments.

- Works closely with Security Engineers and Analysts in supporting existing systems and initiatives.

- Responsible for configuration of SIEM alerting, use case development, testing and tuning.

- Analysis and identification of areas of improvement with existing processes, procedures and documentation.

- Configure SIEM software and appliance-based products in large enterprise and Government environments.

- Knowledge of log agents such as NXlog, SyslogNG in large scale customer environments.

- Well versed with modern SIEMs and assessing the current security environment, developing strategies to enhance the scalability of the solution, and using SIEM to detect incidents and act as the SME for all related questions to the SIEM implementation.

- Ensure all network security assets, both internal and external (e.g. Cloud-based systems), adhere to security best practices, compliance regulations, and required governance frameworks.

- Technical analysis and performance tuning of hardware, software, security, and logging/monitoring systems.

Required qualifications to be successful in this role
- Degree or equivalent work experience working in a Security Operations Centre, Managed Security, or client network environment.

- 2 + years professional experience maintaining SIEM systems.

- 1-2 years professional experience working with networks and network architecture.

- 1+ year professional experience writing and tuning SIEM content within a Managed Security, or client network environment.

- Able to confidentially lead on tasks/mini-projects and engage with the client

- Knowledge of common frameworks and compliances. (ITIL, NCSC, PCI DSS, ATT&CK)

- Fundamental knowledge of Programing/Scripting languages (Python, Java, JavaScript, C++)

- Knowledge of common IT Infrastructure assets and their functions (Firewalls, Load Balancers, IDS/IPS’, Windows/Unix Servers)

- Demonstrated knowledge and experience of Cloud Security best practice on both Azure and Amazon AWS.

#INDCGI

Build your career with us.

It is an extraordinary time to be in business. As digital transformation continues to accelerate, CGI is at the center of this change—supporting our clients’ digital journeys and offering our professionals exciting career opportunities.

At CGI, our success comes from the talent and commitment of our professionals. As one team, we share the challenges and rewards that come from growing our company, which reinforces our culture of ownership. All of our professionals benefit from the value we collectively create.

Be part of building one of the largest independent technology and business services firms in the world.

Learn more about CGI at www.cgi.com.

No unsolicited agency referrals please.

CGI is an equal opportunity employer.

Skills

Reference

728687