Security Operations Team Lead

Job description

The Security Operations Team Lead will be responsible for managing the day-to-day activities across all areas of Security Operations.

Key Duties and Responsibilities:

Be the mainstay for Security Operations issues within SFIT.

Security Operations

·       Day to day responsibility of the security operations team of less than 5 staff; retain functional management responsibilities for 2 members of staff, and functional and hierarchical management responsibilities for 1.

·       Be the point of escalation of any security operations issues.

·       Manage and implement relevant CTI into SecOps practises, sharing as needed.

·       Clearly communicate and escalate risks and issues as or before they occur to the appropriate reporting chain.

·       Respond to threats and alerts whilst remaining calm under pressure.

·       Liaise with group CERT and other partners as required.

·       Manage Security Operations projects throughout the year to ensure completion on time.

Shape the function.

·       Manage the SIEM; be aware of blind spots and how this influences the COP (Common Operating Picture)

·       Recommend continuous areas of improvement across full security function.

General

·       Familiar with compliance frameworks such as GDPR, ISO 27001, Cyber Essentials and various NIST frameworks

·       Educate colleagues on security topics as needed.

·       Respond to queries from other SFIT teams and other colleagues on the breadth of security operations topics.

·       Promote culture of security by design' across all aspects including projects

·       Remain current with new privacy, compliance, and regulatory legislation and changes and the impact this may have to the organisation.

Keep abreast emerging technologies within the IT space

Desired profile

Dimensions and Limits of Authority: 

Scope and autonomy to recommend changes to all aspects of security within Security Operations.

Escalation point for Incident Response 

Qualifications: 

Essential:

GCSE passes in English, Mathematics, and a science.

A-Level Passes or equivalent in Computing.

Desirable:

Degree or equivalent Business Experience.

Technical Certifications (SANS/CompTIA/OffSec)

Experience:

Essential:

Knowledge of compliance and other frameworks/regulatory requirements.

Excellent stakeholder management.

Excellent documentation and organisation skills.

Ability to work under pressure to achieve objectives.

Desirable:

Project Management

Passionate about mentoring/training individuals.

French or Spanish speaker

Worked within MOD or HMG

HackTheBox/ImmersiveLabs/TryHackMe account

Home lab

About SF IT UK

About SFITUK

SFITUK is the internal IT company for a large global construction company that specialises in soil, structural and nuclear engineering operating in over 100 countries. But we're more than one of the worlds leading construction companies.

At SFITUK we're dedicated to building a culture that is a Great Place to Work. Where you are empowered to push the boundaries of your knowledge and skills in Information Technology to help unleash your full potential. There is no better place to work in within IT in the North West that will offer you challenges and opportunities that are part of a leading global organisation to keep you challenging yourself during your career at SFITUK.

SFITUK is an inclusive culture that champions diversity and collaboration and are committed to lifelong learning, growth and development of all of our team.