Cyber Security Manager c£65,000 36 days annual leave, 6% Contributory Pension, Access to Blue Light Discount Card and employee benefits platform. UK Wide (Remote) Permanent Are you passionate about Cyber Security and eager to share your expertise with a Global Household Name? Could you guide and empower a Cyber Security team towards success? We are delighted to be Recruiting a Cyber Security Manager for a Global Household name who provide essential services. The Cyber Security Manager whose mission will be to safeguard data of staff, volunteers, donors, and beneficiaries. The business operates worldwide and due to the nature of their work security is absolutely key! Key Responsibilities Develop and execute a cost-effective cyber security strategy aligned with objectives and risk tolerance, including alignment with the Digital, Data, and Technology (DDaT) directorate strategy. Proactively lead policy and process changes to align with business outcomes, legal requirements, and technical architecture. Manage and grow a team of direct reports ensuring competency and continually development of skills. Foster a collaborative and diverse security engineering culture, assisting teams in selecting and adopting security controls, and supporting Privacy by Design/Secure by Design principles. Act as the primary point of contact for senior stakeholders, building strong relationships as the trusted cyber security expert. The successful candidate should be able to demonstrate the following: Proficient in Sentinel KQL, automation, and Microsoft's technical security tools (Azure, Entra ID, M365 E3 - E5 Security, Microsoft Defender, Sentinel, Data Loss Prevention). Current expertise in cyber security risk management, covering attack types, detection/prevention methods (Mitre ATT&CK, OWASP, CISecurity Critical Security Controls). Robust understanding of IT security standards and frameworks (PCI DSS, NHS DSP Toolkit, ISO 27001, Cyber Security Essentials). Experience in organization-wide cyber risk assessments and compliance gap assessments against standards (PCI DSS, NHS DSP Toolkit, ISO 27001, Cyber Security Essentials), managing improvement plans If you have the required skills apply to the role to arrange a chat!
27/03/2024
Full time
Cyber Security Manager c£65,000 36 days annual leave, 6% Contributory Pension, Access to Blue Light Discount Card and employee benefits platform. UK Wide (Remote) Permanent Are you passionate about Cyber Security and eager to share your expertise with a Global Household Name? Could you guide and empower a Cyber Security team towards success? We are delighted to be Recruiting a Cyber Security Manager for a Global Household name who provide essential services. The Cyber Security Manager whose mission will be to safeguard data of staff, volunteers, donors, and beneficiaries. The business operates worldwide and due to the nature of their work security is absolutely key! Key Responsibilities Develop and execute a cost-effective cyber security strategy aligned with objectives and risk tolerance, including alignment with the Digital, Data, and Technology (DDaT) directorate strategy. Proactively lead policy and process changes to align with business outcomes, legal requirements, and technical architecture. Manage and grow a team of direct reports ensuring competency and continually development of skills. Foster a collaborative and diverse security engineering culture, assisting teams in selecting and adopting security controls, and supporting Privacy by Design/Secure by Design principles. Act as the primary point of contact for senior stakeholders, building strong relationships as the trusted cyber security expert. The successful candidate should be able to demonstrate the following: Proficient in Sentinel KQL, automation, and Microsoft's technical security tools (Azure, Entra ID, M365 E3 - E5 Security, Microsoft Defender, Sentinel, Data Loss Prevention). Current expertise in cyber security risk management, covering attack types, detection/prevention methods (Mitre ATT&CK, OWASP, CISecurity Critical Security Controls). Robust understanding of IT security standards and frameworks (PCI DSS, NHS DSP Toolkit, ISO 27001, Cyber Security Essentials). Experience in organization-wide cyber risk assessments and compliance gap assessments against standards (PCI DSS, NHS DSP Toolkit, ISO 27001, Cyber Security Essentials), managing improvement plans If you have the required skills apply to the role to arrange a chat!
Cyber Respond Lead will own all cyber security events throughout the incident life cycle, ensuring all reporting and escalation flows are performed in adherence to agreed documentation and SLA's. You will work side by side with the Cyber Detect Team. Cyber Detect manage all security alerts undertaking triage analysis and technical incident response. Incident readiness is the first step of the incident life cycle, preparing for the next incident if of the upmost importance. As Respond Manager you will be expected to deliver a strong incident readiness program. This is based in Buckinghamshire office x2 days a week, x3 remote. £70 - 90,000 + Financial Industry Employment Benefits + Bonuses Lead cross-functional post-incident process reviews to identify and implement continuous improvement initiatives. Partner with Legal, 2LoD, Major Incident Management, Threat Management, Vulnerability Management, Attack Surface Reduction, Software Engineering, Security Architecture, Platform Support both locally and globally. You will have experience in: Leading the response to complex incidents in a large-scale environments. Years of relevant experience in cyber security operations, incident management or risk management within an enterprise environment. Self-motivated interest in the latest cyber security threats and vulnerabilities and is able to integrate threat intelligence into incident response strategies to proactively defend against emerging risks. Nice to have would be: Deep technical knowledge of network fundamentals, common Internet protocols and Cloud environments. Strong technical knowledge in incident response frameworks with operational experience and conducting root cause analysis. Familiarity with cyber security standards and regulatory frameworks (NIST, PCI-DSS, GDPR, ISO 27001)
27/03/2024
Full time
Cyber Respond Lead will own all cyber security events throughout the incident life cycle, ensuring all reporting and escalation flows are performed in adherence to agreed documentation and SLA's. You will work side by side with the Cyber Detect Team. Cyber Detect manage all security alerts undertaking triage analysis and technical incident response. Incident readiness is the first step of the incident life cycle, preparing for the next incident if of the upmost importance. As Respond Manager you will be expected to deliver a strong incident readiness program. This is based in Buckinghamshire office x2 days a week, x3 remote. £70 - 90,000 + Financial Industry Employment Benefits + Bonuses Lead cross-functional post-incident process reviews to identify and implement continuous improvement initiatives. Partner with Legal, 2LoD, Major Incident Management, Threat Management, Vulnerability Management, Attack Surface Reduction, Software Engineering, Security Architecture, Platform Support both locally and globally. You will have experience in: Leading the response to complex incidents in a large-scale environments. Years of relevant experience in cyber security operations, incident management or risk management within an enterprise environment. Self-motivated interest in the latest cyber security threats and vulnerabilities and is able to integrate threat intelligence into incident response strategies to proactively defend against emerging risks. Nice to have would be: Deep technical knowledge of network fundamentals, common Internet protocols and Cloud environments. Strong technical knowledge in incident response frameworks with operational experience and conducting root cause analysis. Familiarity with cyber security standards and regulatory frameworks (NIST, PCI-DSS, GDPR, ISO 27001)
Are you a visionary in the realm of SAP architecture, ready to shape the future of our digital landscape? Our leading Pharmaceutical client in the heart of Barcelona are seeking an experienced SAP Technical Architect to lead the design and implementation of cutting-edge S/4 HANA platform architecture, both in the cloud and on-premise. As a pivotal member of our team, you'll define and promote SAP architecture standards and strategies, ensuring alignment with our organizational goals and objectives. Experience Required: 8+ years in SAP S/4 HANA, NetWeaver, and related products. Global IT transformation experience, preferably in FMCG or FMCH industries. Strong understanding of IAAS/SAAS/PAAS and DevOps principles. Familiarity with infrastructure-as-code tools and platform cyber-security. Proficiency in SAP SLT, SAP Data Services, and full life cycle SAP implementations. Excellent communication skills and ability to convey complex ideas effectively. Responsibilities: Design innovative S/4 HANA platform architecture in cloud and on-premise. Define and enforce SAP architecture standards and strategies. Collaborate with stakeholders to communicate best practices and facilitate workshops. Optimize platform performance and availability through technical analysis and roadmap development. Drive continuous improvement with architectural recommendations and integration advisories. Manage contracts, relationships, and budgets with cloud providers. Stay ahead of the curve with SAP's latest technologies and provide expertise in architecture and sizing. Lead improvement projects and manage escalations and incidents. If you are currently searching for your next exciting opportunity with a leading pharmaceutical client then please apply and we will discuss this role in more detail.
27/03/2024
Full time
Are you a visionary in the realm of SAP architecture, ready to shape the future of our digital landscape? Our leading Pharmaceutical client in the heart of Barcelona are seeking an experienced SAP Technical Architect to lead the design and implementation of cutting-edge S/4 HANA platform architecture, both in the cloud and on-premise. As a pivotal member of our team, you'll define and promote SAP architecture standards and strategies, ensuring alignment with our organizational goals and objectives. Experience Required: 8+ years in SAP S/4 HANA, NetWeaver, and related products. Global IT transformation experience, preferably in FMCG or FMCH industries. Strong understanding of IAAS/SAAS/PAAS and DevOps principles. Familiarity with infrastructure-as-code tools and platform cyber-security. Proficiency in SAP SLT, SAP Data Services, and full life cycle SAP implementations. Excellent communication skills and ability to convey complex ideas effectively. Responsibilities: Design innovative S/4 HANA platform architecture in cloud and on-premise. Define and enforce SAP architecture standards and strategies. Collaborate with stakeholders to communicate best practices and facilitate workshops. Optimize platform performance and availability through technical analysis and roadmap development. Drive continuous improvement with architectural recommendations and integration advisories. Manage contracts, relationships, and budgets with cloud providers. Stay ahead of the curve with SAP's latest technologies and provide expertise in architecture and sizing. Lead improvement projects and manage escalations and incidents. If you are currently searching for your next exciting opportunity with a leading pharmaceutical client then please apply and we will discuss this role in more detail.
VMware Engineer - SC Clearance Start Date: ASAP - We can accommodate a reasonable notice period Contract Length: 5 months + Extension Location: Corsham, UK. 5 days on-site per week. Pay: £450 - £500 per day inside IR35 (PAYE) I am working with a leading global consultancy that is looking for an Infrastructure & Network Engineer who holds active SC Clearance to join their team in Corsham. Ideally, we are looking for someone who would be able to start this project as soon as possible, however, we can accommodate a reasonable notice period. Role Description: 3rd/4th Line Infrastructure and Network Engineer - Server, VMware, vRA, Network, Switches, Firewalls We are looking for Infrastructure, Network and VMWare engineers who have some of the following experiences and have the Technical Skills listed below (not all are essential). There is a requirement for on-site work building out physical infrastructure within data centres or configuring virtual infrastructure within our client's offices in Corsham. Highly motivated individual, a go-getter and problem solver, who can take ownership of a task, work independently, and can also function within a small delivery team. Diligent with an attention to detail. Lead on the implementation and support of the physical infrastructure, supporting core systems and networking to ensure the security, stability and performance of all systems. Implement and support key security improvements across all core systems and infrastructure. Network, Switches and Firewall install, configuration and problem diagnostics. Skills in cloud architecture and subsequent documentation production ie HLD, LLDs A good understanding of cyber security as it pertains to Hardware and Software configurations. Overarching knowledge of private cloud architecture including Automation, SDN and resource management. Strong understanding of Group Policy, including being up to date with new features and best practices. Substantial experience in an ICT Infrastructure role. Experienced in managing an IP network. Deliver technology design and implementation including future forecasting requirements. Provide 3rd Line technical support, carrying out diagnostic routines and processes to correct complex issues and problems. Work to resolve security vulnerabilities identified by vulnerability scanning solutions and penetration testing. Technical Skills VMWare VSphere, VCF (essential), VMware Horizon/App Volumes (vCenter, vRA) If this looks like you, please get back to me with your updated CV!
27/03/2024
Project-based
VMware Engineer - SC Clearance Start Date: ASAP - We can accommodate a reasonable notice period Contract Length: 5 months + Extension Location: Corsham, UK. 5 days on-site per week. Pay: £450 - £500 per day inside IR35 (PAYE) I am working with a leading global consultancy that is looking for an Infrastructure & Network Engineer who holds active SC Clearance to join their team in Corsham. Ideally, we are looking for someone who would be able to start this project as soon as possible, however, we can accommodate a reasonable notice period. Role Description: 3rd/4th Line Infrastructure and Network Engineer - Server, VMware, vRA, Network, Switches, Firewalls We are looking for Infrastructure, Network and VMWare engineers who have some of the following experiences and have the Technical Skills listed below (not all are essential). There is a requirement for on-site work building out physical infrastructure within data centres or configuring virtual infrastructure within our client's offices in Corsham. Highly motivated individual, a go-getter and problem solver, who can take ownership of a task, work independently, and can also function within a small delivery team. Diligent with an attention to detail. Lead on the implementation and support of the physical infrastructure, supporting core systems and networking to ensure the security, stability and performance of all systems. Implement and support key security improvements across all core systems and infrastructure. Network, Switches and Firewall install, configuration and problem diagnostics. Skills in cloud architecture and subsequent documentation production ie HLD, LLDs A good understanding of cyber security as it pertains to Hardware and Software configurations. Overarching knowledge of private cloud architecture including Automation, SDN and resource management. Strong understanding of Group Policy, including being up to date with new features and best practices. Substantial experience in an ICT Infrastructure role. Experienced in managing an IP network. Deliver technology design and implementation including future forecasting requirements. Provide 3rd Line technical support, carrying out diagnostic routines and processes to correct complex issues and problems. Work to resolve security vulnerabilities identified by vulnerability scanning solutions and penetration testing. Technical Skills VMWare VSphere, VCF (essential), VMware Horizon/App Volumes (vCenter, vRA) If this looks like you, please get back to me with your updated CV!
We are IT Recruitment Specialists partnered with a prestigious Global Consultancy who required an Infrastructure and Network Engineer for one of their public sector Clients. Role Title: Infrastructure and Network Engineer - Server, VMware, vRA, Network, Switches, Firewalls Location: Corsham Onsite 5 days Duration: 3 - 4 Months Role Description: 3rd/4th Line Infrastructure and Network Engineer - Server, VMware, vRA, Network, Switches, Firewalls We are looking for Infrastructure, Network and VMWare engineers who have some of the following experiences and have the Technical Skills listed below (not all are essential). There is a requirement for on-site work building out physical infrastructure within data centres or configuring virtual infrastructure within our Corsham offices. Highly motivated individual, a go-getter and problem solver, who can take ownership of a task, work independently, and can also function within a small delivery team. Diligent with an attention to detail. Lead on the implementation and support of the physical infrastructure, supporting core systems and networking to ensure the security, stability and performance of all systems. Implement and support key security improvements across all core systems and infrastructure. Network, Switches and Firewall install, configuration and problem diagnostics. Skills in cloud architecture and subsequent documentation production ie HLD, LLDs A good understanding of cyber security as it pertains to Hardware and Software configurations. Overarching knowledge of private cloud architecture including Automation, SDN and resource management. Strong understanding of Group Policy, including being up to date with new features and best practices. Substantial experience in an ICT Infrastructure role. Experienced in managing an IP network. Deliver technology design and implementation including future forecasting requirements. Provide 3rd Line technical support, carrying out diagnostic routines and processes to correct complex issues and problems. Work to resolve security vulnerabilities identified by vulnerability scanning solutions and penetration testing. Technical Skills VMWare VSphere, VCF (essential), VMware Horizon/App Volumes (vCenter, vRA)
27/03/2024
Project-based
We are IT Recruitment Specialists partnered with a prestigious Global Consultancy who required an Infrastructure and Network Engineer for one of their public sector Clients. Role Title: Infrastructure and Network Engineer - Server, VMware, vRA, Network, Switches, Firewalls Location: Corsham Onsite 5 days Duration: 3 - 4 Months Role Description: 3rd/4th Line Infrastructure and Network Engineer - Server, VMware, vRA, Network, Switches, Firewalls We are looking for Infrastructure, Network and VMWare engineers who have some of the following experiences and have the Technical Skills listed below (not all are essential). There is a requirement for on-site work building out physical infrastructure within data centres or configuring virtual infrastructure within our Corsham offices. Highly motivated individual, a go-getter and problem solver, who can take ownership of a task, work independently, and can also function within a small delivery team. Diligent with an attention to detail. Lead on the implementation and support of the physical infrastructure, supporting core systems and networking to ensure the security, stability and performance of all systems. Implement and support key security improvements across all core systems and infrastructure. Network, Switches and Firewall install, configuration and problem diagnostics. Skills in cloud architecture and subsequent documentation production ie HLD, LLDs A good understanding of cyber security as it pertains to Hardware and Software configurations. Overarching knowledge of private cloud architecture including Automation, SDN and resource management. Strong understanding of Group Policy, including being up to date with new features and best practices. Substantial experience in an ICT Infrastructure role. Experienced in managing an IP network. Deliver technology design and implementation including future forecasting requirements. Provide 3rd Line technical support, carrying out diagnostic routines and processes to correct complex issues and problems. Work to resolve security vulnerabilities identified by vulnerability scanning solutions and penetration testing. Technical Skills VMWare VSphere, VCF (essential), VMware Horizon/App Volumes (vCenter, vRA)
*Fully remote position* *Long Term Contract* *MUST HAVE CISSP Certification* A prestigious company is looking for a Cyber Risk Management Analyst. This analyst will focus on 3rd party risk assessments, malware detection/prevention, MDM, cloud security management, Api security, authentication/authorization, access control, and vulnerability exploitation. Qualifications 4+ w/Bachelors degree 2+ years of experience with a Masters degree in a relevant field of study is acceptable 4+ years of combined hands-on IT and security architecture development and implementation work experience with a broad exposure to infrastructure/network and multi-platform environments. 2+ years of experience in information security solution engineering or security service delivery. A complete, and working understanding of information security and appropriate use enforcement technology solutions including advanced malware detection/prevention, mobile device virtualization/MDM, cloud security management, structured and unstructured database encryption, mobile application and remote API security, fine-grained application authorization and access control, security event visualization, big data user and entity behavior analytics, active adversary deception, and others. A working understanding of contemporary security theory and application (including vulnerabilities, exploitation techniques and attack vectors). Understanding of systems development life cycle to lead multifunctional projects or initiatives. Knowledge of security principles, issues, techniques and implications across all existing computer platforms
26/03/2024
Project-based
*Fully remote position* *Long Term Contract* *MUST HAVE CISSP Certification* A prestigious company is looking for a Cyber Risk Management Analyst. This analyst will focus on 3rd party risk assessments, malware detection/prevention, MDM, cloud security management, Api security, authentication/authorization, access control, and vulnerability exploitation. Qualifications 4+ w/Bachelors degree 2+ years of experience with a Masters degree in a relevant field of study is acceptable 4+ years of combined hands-on IT and security architecture development and implementation work experience with a broad exposure to infrastructure/network and multi-platform environments. 2+ years of experience in information security solution engineering or security service delivery. A complete, and working understanding of information security and appropriate use enforcement technology solutions including advanced malware detection/prevention, mobile device virtualization/MDM, cloud security management, structured and unstructured database encryption, mobile application and remote API security, fine-grained application authorization and access control, security event visualization, big data user and entity behavior analytics, active adversary deception, and others. A working understanding of contemporary security theory and application (including vulnerabilities, exploitation techniques and attack vectors). Understanding of systems development life cycle to lead multifunctional projects or initiatives. Knowledge of security principles, issues, techniques and implications across all existing computer platforms
Infrastructure and Network Engineer - (Server, VMware, vRA, Network, Switches, Firewalls) Duration: 4 Month Contract Daily rate: £450 - £525 per day Location: Corsham Onsite 5 days *Requires active Security Clearance* 3rd/4th Line Infrastructure and Network Engineers - Server, VMware, vRA, Network, Switches, Firewalls (5 positions) What we are looking for: We are looking for Infrastructure, Network and VMWare engineers who have some of the following experiences and have the Technical Skills listed below (not all are essential). There is a requirement for on-site work building out physical infrastructure within data centres or configuring virtual infrastructure within our Corsham offices. * VMWare VSphere, VCF (essential) Not all essential, we are looking for people with a variety of experience: Lead on the implementation and support of the physical infrastructure, supporting core systems and networking to ensure the security, stability and performance of all systems. Implement and support key security improvements across all core systems and infrastructure. Network, Switches and Firewall install, configuration and problem diagnostics. Skills in cloud architecture and subsequent documentation production ie HLD, LLDs A good understanding of cyber security as it pertains to Hardware and Software configurations. Overarching knowledge of private cloud architecture including Automation, SDN and resource management. Strong understanding of Group Policy, including being up to date with new features and best practices. Substantial experience in an ICT Infrastructure role. Experienced in managing an IP network. Deliver technology design and implementation including future forecasting requirements. Provide 3rd Line technical support, carrying out diagnostic routines and processes to correct complex issues and problems. Work to resolve security vulnerabilities identified by vulnerability scanning solutions and penetration testing. If you are interested please apply for more information
26/03/2024
Project-based
Infrastructure and Network Engineer - (Server, VMware, vRA, Network, Switches, Firewalls) Duration: 4 Month Contract Daily rate: £450 - £525 per day Location: Corsham Onsite 5 days *Requires active Security Clearance* 3rd/4th Line Infrastructure and Network Engineers - Server, VMware, vRA, Network, Switches, Firewalls (5 positions) What we are looking for: We are looking for Infrastructure, Network and VMWare engineers who have some of the following experiences and have the Technical Skills listed below (not all are essential). There is a requirement for on-site work building out physical infrastructure within data centres or configuring virtual infrastructure within our Corsham offices. * VMWare VSphere, VCF (essential) Not all essential, we are looking for people with a variety of experience: Lead on the implementation and support of the physical infrastructure, supporting core systems and networking to ensure the security, stability and performance of all systems. Implement and support key security improvements across all core systems and infrastructure. Network, Switches and Firewall install, configuration and problem diagnostics. Skills in cloud architecture and subsequent documentation production ie HLD, LLDs A good understanding of cyber security as it pertains to Hardware and Software configurations. Overarching knowledge of private cloud architecture including Automation, SDN and resource management. Strong understanding of Group Policy, including being up to date with new features and best practices. Substantial experience in an ICT Infrastructure role. Experienced in managing an IP network. Deliver technology design and implementation including future forecasting requirements. Provide 3rd Line technical support, carrying out diagnostic routines and processes to correct complex issues and problems. Work to resolve security vulnerabilities identified by vulnerability scanning solutions and penetration testing. If you are interested please apply for more information
Enterprise Security Architect - CISSP - Cyber - Bristol. My Financial Services client are looking for an experienced Enterprise Security Architect with a focus on delivery who is able to their team and be responsible for providing cyber risk expertise that will shape the environment. The key objectives of the role are: Strengthening the bridge between business and technology through early engagement in the strategy process; business case development; and delivery life cycle to ensure that security risks are considered and addressed through the roadmap. Developing a Security Architecture that enables the organisation to explore and implement security solutions and capabilities that are clearly aligned with business, technology, and threat drivers. Providing an independent source of technical expertise to work with the Cyber Security Team and ensure that controls are effective, proportionate, consistent, and deliverable. Essential Experience: Demonstrable experience in a role of similar responsibility and scale A graduate level qualification in IT or technical subject Relevant professional certification to CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Auditor etc Proven track record of leadership, preferably with a history of involvement in cyber related transformation projects and the effective development and implementation of new systems and control processes Experience working in collaboration with third party vendors and external cloud service providers. Understanding of cyber security incident procedures and security incident management frameworks, processes, and associated response measures Understanding and knowledge of infrastructure; application; and security technologies Please send in your CV for more details and a chat.
25/03/2024
Full time
Enterprise Security Architect - CISSP - Cyber - Bristol. My Financial Services client are looking for an experienced Enterprise Security Architect with a focus on delivery who is able to their team and be responsible for providing cyber risk expertise that will shape the environment. The key objectives of the role are: Strengthening the bridge between business and technology through early engagement in the strategy process; business case development; and delivery life cycle to ensure that security risks are considered and addressed through the roadmap. Developing a Security Architecture that enables the organisation to explore and implement security solutions and capabilities that are clearly aligned with business, technology, and threat drivers. Providing an independent source of technical expertise to work with the Cyber Security Team and ensure that controls are effective, proportionate, consistent, and deliverable. Essential Experience: Demonstrable experience in a role of similar responsibility and scale A graduate level qualification in IT or technical subject Relevant professional certification to CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Auditor etc Proven track record of leadership, preferably with a history of involvement in cyber related transformation projects and the effective development and implementation of new systems and control processes Experience working in collaboration with third party vendors and external cloud service providers. Understanding of cyber security incident procedures and security incident management frameworks, processes, and associated response measures Understanding and knowledge of infrastructure; application; and security technologies Please send in your CV for more details and a chat.
Keystream has partnered with a central government department who are looking to appoint an Associate Director for Digital, Data and Technology. This is an exciting time for the DDaT team as they transform the way that they deliver their digital and data services by placing the right emphasis on Product Delivery using User Centred Design principles. Benefits include: Starting salary of £65,000 30% pension 40 days annual leave Hybrid/WFH options available Main responsibilities: You will provide strategic technical leadership to enable them to become fully established as a digitally and data enabled organisation, using the best of cloud technology. You will lead and architect the implementation of integrated DDaT solutions in their mature and evolving Microsoft Azure estate, ensuring they meet current and future business needs. You will play a key role in leading their commitment to delivering continuous improvement of their technology and you will provide strategic advice to their Information Management team for all aspects of Digital, Data, Infrastructure, and cyber-security. Experience required: Full grounding in the take-up and use of SaaS, PaaS, IaaS and how these technologies may be used to build cloud-native solutions for Regulation. Specialist knowledge of the Microsoft Azure stack relating to software development, data management methodologies, DevOps and design patterns. Proficient and hands on experience in architecting, designing and managing continuous delivery system and methodologies in Azure. Ability to bridge the gap between technical and non-technical, mediate between people and communicate with stakeholders at all levels. Ability to engage across the organisation, understanding priorities and ensuring these strategic needs are met using cloud native technology solutions. Please apply should you meet the above criteria.
25/03/2024
Full time
Keystream has partnered with a central government department who are looking to appoint an Associate Director for Digital, Data and Technology. This is an exciting time for the DDaT team as they transform the way that they deliver their digital and data services by placing the right emphasis on Product Delivery using User Centred Design principles. Benefits include: Starting salary of £65,000 30% pension 40 days annual leave Hybrid/WFH options available Main responsibilities: You will provide strategic technical leadership to enable them to become fully established as a digitally and data enabled organisation, using the best of cloud technology. You will lead and architect the implementation of integrated DDaT solutions in their mature and evolving Microsoft Azure estate, ensuring they meet current and future business needs. You will play a key role in leading their commitment to delivering continuous improvement of their technology and you will provide strategic advice to their Information Management team for all aspects of Digital, Data, Infrastructure, and cyber-security. Experience required: Full grounding in the take-up and use of SaaS, PaaS, IaaS and how these technologies may be used to build cloud-native solutions for Regulation. Specialist knowledge of the Microsoft Azure stack relating to software development, data management methodologies, DevOps and design patterns. Proficient and hands on experience in architecting, designing and managing continuous delivery system and methodologies in Azure. Ability to bridge the gap between technical and non-technical, mediate between people and communicate with stakeholders at all levels. Ability to engage across the organisation, understanding priorities and ensuring these strategic needs are met using cloud native technology solutions. Please apply should you meet the above criteria.
Request Technology - Craig Johnson
Oakland, California
*We are unable to sponsor for this 6+ Month contract Remote role* Prestigious Enterprise Company is currently seeking a Third Party Cyber Risk Analyst. Candidate will effectively analyze information systems and applications, assess and evaluate cyber capabilities, and monitor and respond to security events within Delta Dental's environment. The role will collaborate with Technology teams and business partners to identify threats, create strategies to better protect technology assets, and deploy technologies and processes to put those strategies into action. Qualifications: 2+ years of experience with a Masters degree in a relevant field of study is acceptable 4+ years of combined hands-on IT and security architecture development and implementation work experience with a broad exposure to infrastructure/network and multi-platform environments. 2+ years of experience in information security solution engineering or security service delivery. A complete, and working understanding of information security and appropriate use enforcement technology solutions including advanced malware detection/prevention, mobile device virtualization/MDM, cloud security management, structured and unstructured database encryption, mobile application and remote API security, fine-grained application authorization and access control, security event visualization, big data user and entity behavior analytics, active adversary deception, and others. A working understanding of contemporary security theory and application (including vulnerabilities, exploitation techniques and attack vectors). Understanding of systems development life cycle to lead multifunctional projects or initiatives. Knowledge of laws, regulations, and standards relevant to the US Healthcare industry Excellent written and verbal communication skills (including technical writing, procedure creation, and documentation development). Must be able to effectively communicate security concepts to a technical audience Able to understand moderately complex written and oral instructions Ability to clearly present complex/security subjects and findings to technical staff and management Strong Exceptional technical writing skills including documentation development, process mapping, and visualization Ability to communicate technical concepts and think on the fly Ability to interact well with co-workers and outside contacts Knowledge of security principles, issues, techniques and implications across all existing computer platforms
22/03/2024
Project-based
*We are unable to sponsor for this 6+ Month contract Remote role* Prestigious Enterprise Company is currently seeking a Third Party Cyber Risk Analyst. Candidate will effectively analyze information systems and applications, assess and evaluate cyber capabilities, and monitor and respond to security events within Delta Dental's environment. The role will collaborate with Technology teams and business partners to identify threats, create strategies to better protect technology assets, and deploy technologies and processes to put those strategies into action. Qualifications: 2+ years of experience with a Masters degree in a relevant field of study is acceptable 4+ years of combined hands-on IT and security architecture development and implementation work experience with a broad exposure to infrastructure/network and multi-platform environments. 2+ years of experience in information security solution engineering or security service delivery. A complete, and working understanding of information security and appropriate use enforcement technology solutions including advanced malware detection/prevention, mobile device virtualization/MDM, cloud security management, structured and unstructured database encryption, mobile application and remote API security, fine-grained application authorization and access control, security event visualization, big data user and entity behavior analytics, active adversary deception, and others. A working understanding of contemporary security theory and application (including vulnerabilities, exploitation techniques and attack vectors). Understanding of systems development life cycle to lead multifunctional projects or initiatives. Knowledge of laws, regulations, and standards relevant to the US Healthcare industry Excellent written and verbal communication skills (including technical writing, procedure creation, and documentation development). Must be able to effectively communicate security concepts to a technical audience Able to understand moderately complex written and oral instructions Ability to clearly present complex/security subjects and findings to technical staff and management Strong Exceptional technical writing skills including documentation development, process mapping, and visualization Ability to communicate technical concepts and think on the fly Ability to interact well with co-workers and outside contacts Knowledge of security principles, issues, techniques and implications across all existing computer platforms
CONTRACT CYBERARK Rate - C2C Open REMOTE DURATION: 6 MONTH MINIMUM Must have excellent communication skills, must have excellent documentation skills, PAM CyberArk Responsible for the implementation and management of CyberArk and other Privileged Management solutions. Has familiarity working with most CyberArk products, including but not limited to: Privileged Access Manager, Vendor Privileged Access Manager, Cloud Entitlements Manager, Endpoint Privilege Manager, Privileged Session Manager, Privileged Threat Analytics, and Privileged Cloud. Identifies and leads privileged access management improvements and projects to improve our overall security posture Manages the end-to-end CyberArk environment/application from maintenance to administration Manages all privileged credentials across a hybrid environment Works collaboratively across the business to define and create CyberArk policies, platforms, safes Responsible for utilizing KPIs and metrics to report out on CyberArk system health Actively protects the integrity and confidentiality of our information assets while enabling business functionality in all systems and environments by supporting applicable security solutions Supports departmental and corporate goals by meeting key performance indicators and defined metrics Supports and follows Change Management processes and procedures Serves as a technical escalation resource to less experienced team members Participates in and supports Compliance processes, providing leadership and support to Analysts. Recommends and implements new functionality to enhance compliance processes while ensuring compliance controls are followed and effective. Responsible for 24x7x365 on-call escalation rotational support Experience : 3+ years of hands-on experience with implementing and managing CyberArk environments 3+ years of experience or training in Identity systems security fundamentals design, implementation and troubleshooting across all computer/server platforms. Experience in designing and standing up a new CyberArk environment or migration to a new environment. Experience supporting a distributed hybrid cloud/on-premises environment Understanding and experience operating within the NIST Security Framework Strong written and verbal communication skills Education/Certifications: Bachelor's degree from an accredited college or university, or equivalent experience. One or more of the following CyberArk certifications are desired but not required: Defender, Sentry, or Guardian Certification in one or more of the following areas is desired but not required: Certified Information Security Professional (CISSP), Certified Cloud Security Professional (CCSP) WORK TO BE PERFORMED: Perform Privileged Access Management (PAM) Work utilizing CyberArk and Hashi Vault Support planning, designing, and executing of the PAM strategy Work on implementing Privileged Session Management solution through CyberArk Work across multiple teams and pillars to socialize and align PAM requirements to the organization Remediate and troubleshoot PAM related errors across the CyberArk and Hashi Platforms Provide operational support for PAM platforms Work on integrations with other applications and systems to provide CyberArk or Hashi support Assist in building CyberArk infrastructure Assist and help lead architecture development and creation of relevant documentation Assist with product documentation and processes for PAM team Deliverables: PAM Strategy draft Implementation of Privileged Session Management solution Process documentation and architectural documentation, as needed Provide subject matter expert level expertise and support on implementing and maintaining the CyberArk platforms. Provide Cloud Security Engineering Services Identify cloud-based security objectives for PAM program and provide SME level expertise Assist with integrating hybrid model with cloud and on-prem services Provide best practices recommendations for cloud connectivity and account management Produce detailed documentation around all aspects of cloud integration and functionality. Deliverables: Provide Cloud related documentation, guidance, and assistance. Operational Skills Assist in Tier 2/3 support of PAM platforms Provide training, documentation, and Standard Operating Procedures (SOP s) to Managed Security Services Provider (MSSP) vendor for continued development of operations support Deliverables: Provide operational support and documentation/guidance for all operational requirements
22/03/2024
Project-based
CONTRACT CYBERARK Rate - C2C Open REMOTE DURATION: 6 MONTH MINIMUM Must have excellent communication skills, must have excellent documentation skills, PAM CyberArk Responsible for the implementation and management of CyberArk and other Privileged Management solutions. Has familiarity working with most CyberArk products, including but not limited to: Privileged Access Manager, Vendor Privileged Access Manager, Cloud Entitlements Manager, Endpoint Privilege Manager, Privileged Session Manager, Privileged Threat Analytics, and Privileged Cloud. Identifies and leads privileged access management improvements and projects to improve our overall security posture Manages the end-to-end CyberArk environment/application from maintenance to administration Manages all privileged credentials across a hybrid environment Works collaboratively across the business to define and create CyberArk policies, platforms, safes Responsible for utilizing KPIs and metrics to report out on CyberArk system health Actively protects the integrity and confidentiality of our information assets while enabling business functionality in all systems and environments by supporting applicable security solutions Supports departmental and corporate goals by meeting key performance indicators and defined metrics Supports and follows Change Management processes and procedures Serves as a technical escalation resource to less experienced team members Participates in and supports Compliance processes, providing leadership and support to Analysts. Recommends and implements new functionality to enhance compliance processes while ensuring compliance controls are followed and effective. Responsible for 24x7x365 on-call escalation rotational support Experience : 3+ years of hands-on experience with implementing and managing CyberArk environments 3+ years of experience or training in Identity systems security fundamentals design, implementation and troubleshooting across all computer/server platforms. Experience in designing and standing up a new CyberArk environment or migration to a new environment. Experience supporting a distributed hybrid cloud/on-premises environment Understanding and experience operating within the NIST Security Framework Strong written and verbal communication skills Education/Certifications: Bachelor's degree from an accredited college or university, or equivalent experience. One or more of the following CyberArk certifications are desired but not required: Defender, Sentry, or Guardian Certification in one or more of the following areas is desired but not required: Certified Information Security Professional (CISSP), Certified Cloud Security Professional (CCSP) WORK TO BE PERFORMED: Perform Privileged Access Management (PAM) Work utilizing CyberArk and Hashi Vault Support planning, designing, and executing of the PAM strategy Work on implementing Privileged Session Management solution through CyberArk Work across multiple teams and pillars to socialize and align PAM requirements to the organization Remediate and troubleshoot PAM related errors across the CyberArk and Hashi Platforms Provide operational support for PAM platforms Work on integrations with other applications and systems to provide CyberArk or Hashi support Assist in building CyberArk infrastructure Assist and help lead architecture development and creation of relevant documentation Assist with product documentation and processes for PAM team Deliverables: PAM Strategy draft Implementation of Privileged Session Management solution Process documentation and architectural documentation, as needed Provide subject matter expert level expertise and support on implementing and maintaining the CyberArk platforms. Provide Cloud Security Engineering Services Identify cloud-based security objectives for PAM program and provide SME level expertise Assist with integrating hybrid model with cloud and on-prem services Provide best practices recommendations for cloud connectivity and account management Produce detailed documentation around all aspects of cloud integration and functionality. Deliverables: Provide Cloud related documentation, guidance, and assistance. Operational Skills Assist in Tier 2/3 support of PAM platforms Provide training, documentation, and Standard Operating Procedures (SOP s) to Managed Security Services Provider (MSSP) vendor for continued development of operations support Deliverables: Provide operational support and documentation/guidance for all operational requirements
You: Ideally we are looking for a Senior Engineer (3-5 years hands-on experience) who has the experience or desire to lean in to deisng/architecture. In this post you will remain hands-on initially but will be leaning into the design aspect of the infrastructure by aiding the CTO(s) with their high level designs (HLD). You should have a minimum of SC Clearance active. Experience: Systems engineering experience at technical lead level with technologies such as Microsoft, Amazon (AWS), VMWare, RedHat or similar. Able to design, support and maintain internal IT environments, platforms and services at SME level or above. Awareness of Defence or National Security IT standards, a background within these domains would be preferential; including within environments that operate at multiple classification levels. Some exposure to Solution or Enterprise Architecture methods, you do not need to be a practitioner. Key Tools: Corporate Microsoft Estate: 1000+ desktops and hundreds of Servers. This includes 'On-Prem' Microsoft full stack alongside 0365, Azure and AWS offerings. Cloud platforms: Primarily AWS and Azure covering organisation design (layout), tenancy/account management, security, identity management, service provisioning and reporting functions. Identity and Directory services: Design, management and maintenance of Microsoft Active Directory, OpenLDAP, KeyCloak and Microsoft's enterprise Single Sign-On technologies. Mobile device management: Covering 300+ deployed mobile devices, applying best practice and industry standards. Cyber security and information assurance: Managing and maintaining intrusion detection apparatus, supporting queries/investigations and hardened configuration of IT equipment. DevSecOps and Site Reliability Engineering: Supporting enterprise software teams and their Ci/CD requirements using tools such as GitLab, Jenkins or SonarQube etc.
21/03/2024
Full time
You: Ideally we are looking for a Senior Engineer (3-5 years hands-on experience) who has the experience or desire to lean in to deisng/architecture. In this post you will remain hands-on initially but will be leaning into the design aspect of the infrastructure by aiding the CTO(s) with their high level designs (HLD). You should have a minimum of SC Clearance active. Experience: Systems engineering experience at technical lead level with technologies such as Microsoft, Amazon (AWS), VMWare, RedHat or similar. Able to design, support and maintain internal IT environments, platforms and services at SME level or above. Awareness of Defence or National Security IT standards, a background within these domains would be preferential; including within environments that operate at multiple classification levels. Some exposure to Solution or Enterprise Architecture methods, you do not need to be a practitioner. Key Tools: Corporate Microsoft Estate: 1000+ desktops and hundreds of Servers. This includes 'On-Prem' Microsoft full stack alongside 0365, Azure and AWS offerings. Cloud platforms: Primarily AWS and Azure covering organisation design (layout), tenancy/account management, security, identity management, service provisioning and reporting functions. Identity and Directory services: Design, management and maintenance of Microsoft Active Directory, OpenLDAP, KeyCloak and Microsoft's enterprise Single Sign-On technologies. Mobile device management: Covering 300+ deployed mobile devices, applying best practice and industry standards. Cyber security and information assurance: Managing and maintaining intrusion detection apparatus, supporting queries/investigations and hardened configuration of IT equipment. DevSecOps and Site Reliability Engineering: Supporting enterprise software teams and their Ci/CD requirements using tools such as GitLab, Jenkins or SonarQube etc.
Request Technology - Craig Johnson
San Francisco, California
*We are unable to sponsor for this Remote contract role* Prestigious Enterprise Company is currently seeking a Senior CyberArk Engineer. Candidate will be responsible for the implementation and management of CyberArk and other Privileged Management solutions. Candidate will have familiarity working with most CyberArk products, including but not limited to: Privileged Access Manager, Vendor Privileged Access Manager, Cloud Entitlements Manager, Endpoint Privilege Manager, Privileged Session Manager, Privileged Threat Analytics, and Privileged Cloud. Responsibilities: Identifies and leads privileged access management improvements and projects to improve our overall security posture Manages the end-to-end CyberArk environment/application from maintenance to administration Manages all privileged credentials across a hybrid environment Works collaboratively across the business to define and create CyberArk policies, platforms, safes Responsible for utilizing KPI's and metrics to report out on CyberArk system health Actively protects the integrity and confidentiality of our information assets while enabling business functionality in all systems and environments by supporting applicable security solutions Supports departmental and corporate goals by meeting key performance indicators and defined metrics Supports and follows Change Management processes and procedures Serves as a technical escalation resource to less experienced team members Participates in and supports Compliance processes, providing leadership and support to Analysts. Recommends and implements new functionality to enhance compliance processes while ensuring compliance controls are followed and effective. Responsible for 24x7x365 on-call escalation rotational support Qualifications: Deep understanding of CyberArk and its components Prior utilization of representational state transfer application programming interface (REST API) Experience with PAM related architecture and best practices Strong understanding of Cloud Service Providers and relevant experience with integration and configuration of PAM platforms into the cloud Operational experience helping manage CyberArk and Hashi Vault infrastructure Knowledge or usage of Terraform/Hashicorp Configuration language (HCL) Strong understanding of modern deployment technologies including CICD, Terraform, Ansible, and Docker Proficiency in cryptography. Experience with Windows, Unix, Cisco, platforms, and controls. 3-5+ Years' direct experience with CyberArk or Hashi at an Engineering level 5+ Years' experience in PAM management and platforms PAM related certifications (CyberArk Defender OR Sentry/Hashi Administrator)
04/03/2024
Project-based
*We are unable to sponsor for this Remote contract role* Prestigious Enterprise Company is currently seeking a Senior CyberArk Engineer. Candidate will be responsible for the implementation and management of CyberArk and other Privileged Management solutions. Candidate will have familiarity working with most CyberArk products, including but not limited to: Privileged Access Manager, Vendor Privileged Access Manager, Cloud Entitlements Manager, Endpoint Privilege Manager, Privileged Session Manager, Privileged Threat Analytics, and Privileged Cloud. Responsibilities: Identifies and leads privileged access management improvements and projects to improve our overall security posture Manages the end-to-end CyberArk environment/application from maintenance to administration Manages all privileged credentials across a hybrid environment Works collaboratively across the business to define and create CyberArk policies, platforms, safes Responsible for utilizing KPI's and metrics to report out on CyberArk system health Actively protects the integrity and confidentiality of our information assets while enabling business functionality in all systems and environments by supporting applicable security solutions Supports departmental and corporate goals by meeting key performance indicators and defined metrics Supports and follows Change Management processes and procedures Serves as a technical escalation resource to less experienced team members Participates in and supports Compliance processes, providing leadership and support to Analysts. Recommends and implements new functionality to enhance compliance processes while ensuring compliance controls are followed and effective. Responsible for 24x7x365 on-call escalation rotational support Qualifications: Deep understanding of CyberArk and its components Prior utilization of representational state transfer application programming interface (REST API) Experience with PAM related architecture and best practices Strong understanding of Cloud Service Providers and relevant experience with integration and configuration of PAM platforms into the cloud Operational experience helping manage CyberArk and Hashi Vault infrastructure Knowledge or usage of Terraform/Hashicorp Configuration language (HCL) Strong understanding of modern deployment technologies including CICD, Terraform, Ansible, and Docker Proficiency in cryptography. Experience with Windows, Unix, Cisco, platforms, and controls. 3-5+ Years' direct experience with CyberArk or Hashi at an Engineering level 5+ Years' experience in PAM management and platforms PAM related certifications (CyberArk Defender OR Sentry/Hashi Administrator)