Tactical Security Operations Manager

BACKGROUND
Our Central Government client is looking to take on a Tactical Security Operations Centre (TSOC) Manager to work a 6 month contract based in Newcastle.

The TSOC Manager will collect log files from a source of infrastructure devices and store them securely within the existing ESEM storage capability. Over a period of three months the devices will be on boarded to the active monitoring that can be provided by the ESEM service. Until that takes place we can only undertake retrospective analysis of existing device logs. During this period we need to undertake analysis of logs collected to fully understand log contents and in turn inform potential future expansion of the ESEM service.

MAIN DUTIES/RESPONSIBILITIES
To undertake investigative analysis of technical log files to identify potential threats or attacks to the department online channels. This will include detection of probes sent out by prospective attackers trying to identify vulnerabilities in the department protective measures. Identifying control measures to counter act threats.

OUTPUTS/DELIVERABLES TO BE ACHIEVED
a. Detailed log interrogation and analysis to provide reports on actual attacks or potential attacks to the UC Pathfinder service
b. Reports to include root cause analysis of log files from a number of device sources
c. Correlation reports based on joining up events across devices to identify and trace any attack routes or methods etc
d. Recommendations for remediation

SKILLS/EXPERIENCE REQUIRED
1. RSA Envision
2. SIEM
3. Log analysis
4. Syslog collection and analysis
5. GPG 13 protective monitoring requirements
6. Network packet analysis

FORMAL QUALIFICATIONS REQUIRED
1. CISSP or BSc or equivalent
2. Data Analysis capability

ADDITIONAL COMMENTS
Applicants must be SC cleared.

Capita Resourcing welcome applications from all suitably qualified people regardless of gender, race, disability, age or sexual orientation.

Capita Resourcing is a trading name of Capita Resourcing Ltd. Services offered are those of an Employment Agency and Employment Business. Applicants will be required to register with us.