Job Description

Cyber Security-NHS-Inside IR35-Fully Remote

An engineer who can demonstrate technical excellence in the provision of:
• Undertake confidential and sensitive investigations.
• Third line preventative maintenance service to internal and external customers (users) via telephone, email and remote sessions.
• A professional interface for our customers and users to ensure high quality services and resolution of cyber security incidents as quickly as possible.
• To update all incidents assigned to you by the IT Service Desk in order to provide good data for Incident and Problem Management
• To ensure the entire estate is patched to minimise the risk to known vulnerabilities.
• To ensure Anti-Virus is up to date and to resolve any issues as and when they are identified.

Quick response

Required Knowledge

• K0001   Knowledge of computer networking concepts and protocols, and network security methodologies.
• K0004   Knowledge of cybersecurity and privacy principles.
• K0005   Knowledge of cyber threats an`d vulnerabilities.
• K0041   Knowledge of incident categories, incident responses, and timelines for responses.
• K0042   Knowledge of incident response and handling methodologies.
• K0070   Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
• K0230   Knowledge of cloud service models and how those models can limit incident response.
• K0332   Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
• K0565   Knowledge of the common networking and routing protocols (e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.

Required Skills

• S0078   Skill in recognizing and categorizing types of vulnerabilities and associated attacks.
• S0173   Skill in using security event correlation tools.
• S0365   Skill to design incident response for cloud service models.

Required Abilities

• A0121  Ability to design incident response for cloud service models.