Description
Threat Modeller/Security Engineer
Manchester - Fully Remote
£600 - £650p/d - Umbrella Only
3 months
Fantastic new contract opportunity for an experienced Security Engineer with strong Threat Modelling experience required to join this market leading financial services business to help them deliver a range of cutting-edge banking Cyber technologies.
As part of the wider Intelligence & Incident Response team you will be responsible for the delivery of key services covering Threat Modelling and the execution of the end-to-end Threat Modelling service for the function.
Main responsibilities:
- Responsible for the delivery of key services within the Intelligence & Incident Response (I&IR) Function:
- Threat Modelling
- Operational Management
- Cross Divisional stakeholder management
- Service Level Management, and
- Process Design
- Execute the end-to-end Threat Modelling Service for I&IR.
- Input to the cyber threat management strategy by recommending remediation actions for longer term risk reduction.
- Employ threat intelligence analysis to anticipate, identify and prioritise threats.
- Provide advice and guidance around IT Cyber Security industry related best practice across all teams in I&IR and across the Chief Security Office.
- Develop SLA's to assure the highest levels of performance ensuring agility to adapt to the changing threat landscape and technologies.
- Shape, build and implement related processes and procedures for effective threat modelling capability.
- Provide consultancy on the mapping of threats, controls and procedures against audit points and facilitate timely completion of agreed corrective actions.
- Manage and influence a diverse group of cross-divisional stakeholders as required to deliver the Threat Modelling service.
- Act as an SME on threat intelligence sources, emerging and existing threats.
Skills Required:
- Proven background within Security Engineering and in Threat Intelligence and Threat Modelling.
- Excellent understanding of Cyber Security industry related best practice, including technical understanding of recent high-profile cyber-attacks.
- Ability to communicate complex threat/intelligence findings to influence a diverse group of stakeholders and build confidence, using language appropriate to the audience.
- Strong diagnostic skills and able to apply a high level of intuition, curiosity and imagination in decision-making.
- Demonstrate detailed knowledge of advanced cyber-attack techniques.
- Able to define robust technical monitoring controls.
- Demonstrate up-to-date knowledge of high-profile vulnerabilities.
- Knowledge of threat detection techniques and tools.
- Understanding of network protocols and authentication systems.
- Familiarity with intelligence handling approaches.
- Demonstrable systematic and analytical approach to problem solving with the ability to draw on a range of analytical methods.
For any further queries regarding the role, please contact Danny Palmer (see below)