Marcus Donald People Limited
- 5 active jobs (view)
- marcusdonald.com
Description
SecOps Administrator
Marcus Donald are now searching for a SecOps Administrator to join a client based in the City of London.
The successful candidate will be well-versed in security operations, cyber security tools, intrusion detection, and secured networks.
Key Skills as SecOps Administrator
- Experience/Knowledge of Vulnerability management tools (Tenable preferable)
- Experience/Knowledge of SIEM tools (Quadrant preferable)
- Experience/Knowledge of SCCM for patch management
- Experience/Knowledge of CyberArk
- Experience/Knowledge of SolarWinds
- Active Directory
- Being able to suggest new tools
- Monitoring alerts/incidents and escalating
- Understanding of basic scripting
Key Responsibilities as SecOps Administrator
- Perform some analysis, with SecOps Engineers of security tools and the evaluation of available technology capabilities against the security needs of the Firm
- Test and implement security measures that enhance and protect data or operational capabilities across the Firm
- Assist the SecOps team with providing data to show/metrics dashboard of the state of security to various stakeholders
- Provide network defense system implementation, installation and configuration support by identifying, developing and facilitating implementation of initiatives and programs designed to enhance the security of the Firms network and data
- Conduct formal and informal technical/engineering studies, analyses, acquisition and systems engineering support that are critical to enable achievement of program goals and objectives
- Provide notifications, accurate analysis and reporting of events and incidents, including liaising with suppliers and other business teams
- Perform security alert detection and analysis activities across multiple technologies to ensure that security incidents are identified in a timely manner (e.g. SIEM)
- Perform regular vulnerability scans, review results, and work with applicable IT teams to ensure patching is done in a timely matter based on risk
- Update security documentation to include tactics, techniques and operating procedures
- Participate in a 24x7 security incident response on-call rotation