Cyber Security Incident Manager

OVERVIEW

SEP2 requires an experienced Incident Manager to support our customers' growing needs in high quality Digital Forensics and Incident Response (DFIR) services.

Working for one of the UKs fastest-growing specialists in Cyber Security products and services, the successful candidate will work within Wingman Security Operations, our core customer-facing team, and will be responsible for supporting leading security solutions and services for our clients.

Reporting directly to the Head of Information Security, the successful candidate will need to not only be technically minded but also be adept at bringing confidence and direction to our customers during stressful incidents.

This position can be performed remotely, with some travel on occasion to our Leeds office.

KEY TASKS

• Respond to incidents in a structured manner
• Provide direction to analysts responding to incidents
• Perform technical activities such as image handling, malware analysis and deep log reviews
• Coordinate/Provide guidance to high value incidents with external Customer teams
• Coordinate and escalate situations into internal teams
• Write up post-incident reports for customer incidents
• Manage onboarding customers into the Wingman DFIR service
• Work within the SOC to manage Cyber Security solutions defending customer infrastructure from exploitation and cyber-attacks
• Deliver high-quality technical support via phone/email and our ticketing system
• Participate in the on-call rota for DFIR
• Offer and feed into continual service improvement initiatives for operations of the DFIR Service

ESSENTIAL SKILLS/EXPERIENCE

• Experience working in a similar role
• Successful completion of industry certification relating to DFIR (e.g SANS, GIAC etc)
• A solid technical background, having worked with a variety of technologies, such as public cloud, Linux, Wintel and a solid networking background
• Experiencing in operating the following (or equivalent) tooling: Velociraptor, Wireshark, Autopsy, Cuckoo (Or sandboxing equivalent), FTK Imager & Kape
• SIEM investigative capabilities (e.g. Google SecOps, SPLUNK, Sentinel)
• Excellent written and verbal communication skills
• Previous experience in a customer facing role

PERSON SPECIFICATION

• Methodical and cool headed
• The ability to follow pre-documented processes and procedures as requested, as well as communicating effectively where improvements can be made

PERSONAL ATTRIBUTES

• Self-motivation to learn, improve and keep up to date with technologies and concepts within the security industry.
• A ‘Can-do’ attitude
• You have the drive to perform and excel
• You are a team player that thrives in supporting others

HISTORY

Cyber Security Specialists, SEP2 is an organisation providing advanced cyber security services solutions and tech-driven services powered by passionate and honest people.

SEP2 started out in Leeds as an organisation built to add value and do business the right way. We’ve grown, we’ve developed, and we’ve evolved, we’ve taken on experts to expand our knowledge base and technical skills, building a portfolio of accreditations and we’ve developed important relationships with our vendors.

SEP2 are an award-winning cyber-security specialist, whose success is built on five values:

• Honesty
• Passion
• Tech Driven
• People Powered
• Committed to Doing Good

Every SEP2 colleague lives these values every day. We have a culture of passionate people who work as a team that will never leave a job incomplete.

We believe in giving every member of our team responsibility, we nurture the desire to solve problems at the root cause and encourage continuous improvement.

We’re here to beat the bad guys and we’re here for the long-term.

Benefits:

• Casual dress
• Company events
• Company pension
• Cycle to work scheme
• Employee discount
• Enhanced maternity leave
• Gym membership
• Health & wellbeing programme
• Referral programme
• Work from home

Work Location: Hybrid remote in Leeds LS1 2TE