Security Consultant

Job Description

BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.

SOC Senior Analyst & Shift Lead

BAE Systems Digital Intelligence is home to 4,800 digital, cyber and intelligence experts. We work collaboratively across 16 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.

BAE Systems Digital Intelligence is seeking an experienced SOC Analyst to join our growing National Security and Defence team in Canberra. You will bring a strong understanding of security operations, detection engineering and have a flair for innovative approaches to cyber defence operations. The role is 100% on site, may involve early and late shift working on a weekly rotation. There are no Hybrid working options. We would expect the successful candidate to want to expand beyond SOC Operations into wider Security consulting within a 2-3 year timeframe. Broad experience across Azure, AWS and ESXi technologies would be preferable and you be directly contributing to the work of securing of our nation.

Please note that this role requires PV Clearance. Candidates with NV2 willing to be upgraded to TSPV are invited to apply.

Responsibilities

• Ensure that the shift handover brief is prepared and delivered to the incoming shift
• Monitor, triage, analyse and investigate alerts and conduct incident investigations in line with the IRP for both cyber and insider threats.
• Categorise all suspected incidents in line with the Security Incident policy
• Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information.
• Write up high quality security incident tickets using a combination of existing knowledge resources and independent research.
• Support major incident response and remediation activities and conduct permitted remediation (or support customer stakeholders) to inhibit cyber-attacks, clean up IT systems and secure networks against repeat attacks.
• Produce security incident review reports to present information about the security incident and provide security improvement recommendations based on the security incident review.
• Understand Threat Intelligence and its use in an operational environment
• Work with other teams within BAE to improve services on the basis of customer needs.
• Produce new workflows for automation into SOAR tools for common attack types.
• Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat.

Requirements

Technical

• Basic Python and/or scripting skills, Windows, OS X, and Linux
• Experience using Splunk and Sentinal.
• Experience with AWS and Azure security tooling
• Working with a range of security tooling/technology
• Strong understanding of security architecture, in particular networking
• Detailed understanding of threat intelligence and threat actors, TTPs and operationalising threat intelligence.
• Experience in investigating complex network intrusions (by state-sponsored groups or targeted ransomware attacks).
• Understand TCP/IP component layers to identify normal and abnormal traffic
• Understanding of AWS &/or Azure cloud services
• Experience of Splunk (with ES) &/or Sentinel, content development experience desirable
• Hold suitable SAN certifications, such as GCFA, GCFE, GCFR as examples..

Non-technical

• Client side consulting, including stakeholder engagement and the ability to communicate insights and concepts to others (including briefing skills and report writing)
• Coaching mindset – Mentor team.
• Security process development
• Able to understand and adapt to different cultures and hierarchical structures.
• Self-starter and capable of independent working
• Team player and adept at working in multi-disciplinary and diverse teams

Desirable

• Software engineering experience
• Penetration testing skills

Why BAE Systems?

This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation.