This Role sites within the Department for Business and Trade's SOC (Security Operations Centre), reporting to the Principle Cyber Engineer. The SOC is responsible for identification and mitigation of threats, both internal and external to the security of DBT. This role is to support these actions by creating new capabilities, supporting existing capabilities and providing expertise to analysts when required. Focusing on supporting the delivery of the monitoring and development aspects of DBT's TOM (Target Operating Model), this role will involve development of security tools, providing cyber security advice to the development community in DBT to ensure best practice is being followed. This role will be suitable for an individual with a DevSecOps (Development and Security Operations) background or someone who has skills in both software development and Cyber Security. Main responsibilities You will be:
* Supporting the Principle Cyber Security Engineer and SOC Manager in the implementation of the monitoring and improvement roadmap
* Identifying areas of improvement within the SOC and building a plan to implement the improvement.
* Testing and Implementing changes within multiple Cloud Environment.
* Producing software documentation to accurately represent the system that has been implemented and its current state for other engineers to use and rely on.
* Updating and maintaining existing tools and infrastructure.
* Facilitating the ingestion and enriching new logging services into the SIEM (Security Incident and Event Management) Tool for the analysts.
* Maintaining the pipelines and infrastructure that is facilitating the ingestion of logs and processing logs.
* Being able to assist with active investigations that and provide expert knowledge to assist analysts.
* Creating Playbooks for creating new capabilities and documentation for maintaining new capabilities.
The Department for Business and Trade (DBT) has a clear mission - to grow the economy. Our role is to help businesses invest, grow and export to create jobs and opportunities right across the country. We do this in three ways. Firstly, we help to build a strong, competitive business environment, where consumers are protected and companies rewarded for treating their employees properly.Secondly, we open international markets and ensure resilient supply chains. This can be through Free Trade Agreements, trade facilitation and multilateral agreements.Finally, we work in partnership with businesses every day, providing advance, finance and deal-making support to those looking to start up, invest, export and grow.