SecOps Engineer
Quantexa, United Kingdom
Job Description
In March 2016, Quantexa was founded by a team with decades of experience in software, data and advanced analytics. We know the opportunity was big, every business with data at its core can benefit from what we’re doing, so we can hit the ground hard, pioneering a contextual approach. In just over five years, we’ve grown from a few desks huddled in the corner of a shared space to having over 300+ staff worldwide! Having just completed our Series C funding round, we are now in a scale up phase.
Due to our continued success and high demand from our clients, we are looking for a SecOps Engineer to join our Information Security team protecting Quantexa against information security and cyber security threats such as malware, phishing, ransomware and other targeted attacks.
What will you be doing?
You’ll be joining Quantexa’s Information Security team as a SecOps Engineer, day to day you will be working closely with the Senior SecOps Manager. The information security function supports the business by working proactively and responsively to keep our data and our customer’s data secure and identify and remediate potential risks, vulnerabilities and attacks.
Your role if you join us, will be part of a friendly and collaborative team to use industry leading technologies to support the organisation’s Security Operations function involving threat monitoring, threat hunting activities, leveraging outputs from services such as Vulnerability Management, Privileged Access Management, Data Loss Prevention and Threat Intelligence to name a few. You will be working with the broader information security team, to improve our security controls as well as supporting the investigations, assessments and reporting on the outputs of those controls.
You can expect to work across SIEM, Endpoint Detection and Response, Vulnerability Management, Cloud Security. You will need to be comfortable in working closely with the wider business and building relationships and trust with the wider teams such as Cloud, Ramp;D and IT teams.
What do I need to have?
You should have experience against the below:
- Able to proactively review, assess, understand and report on vulnerabilities or security detections in a business context and propose proportionate and effective solutions;
- Attention to detail and curiosity to investigate things that seem wrong or out of place
- An understanding of key attacker techniques and capabilities, and models such as Mitre ATTamp;CK and the various Cyber Kill Chain frameworks;
- Experience in securing cloud platforms, including SaaS, IaaS and PaaS;
- Experience with some combination of SIEM, Vulnerability Management, Endpoint Protection and Response (EDR), Data Loss Prevention (DLP), Cloud Security Posture Management (CSPM);
- Knowledge of key technologies such as Azure Active Directory, Microsoft Windows, Linux, Kubernetes, MFA, SSO, Zero Trust, PAM;
- Knowledge of cloud and endpoint hardening standards and the role they play in securing assets;
- Basic experience in some scripting languages (Python, PowerShell etc.);
- Knowledge of the various Information Security Engineering/SecOps requirements within an ISO/IEC 27001/2 Framework;
- Ability and commitment to achieve industry recognised security certifications; and
- Participate within an on-call rota
Requirements
What do I need to have?
You should have experience against the below:
- Able to proactively review, assess, understand and report on vulnerabilities or security detections in a business context and propose proportionate and effective solutions;
- Attention to detail and curiosity to investigate things that seem wrong or out of place
- An understanding of key attacker techniques and capabilities, and models such as Mitre ATTamp;CK and the various Cyber Kill Chain frameworks;
- Experience in securing cloud platforms, including SaaS, IaaS and PaaS;
- Experience with some combination of SIEM, Vulnerability Management, Endpoint Protection and Response (EDR), Data Loss Prevention (DLP), Cloud Security Posture Management (CSPM);
- Knowledge of key technologies such as Azure Active Directory, Microsoft Windows, Linux, Kubernetes, MFA, SSO, Zero Trust, PAM;
- Knowledge of cloud and endpoint hardening standards and the role they play in securing assets;
- Basic experience in some scripting languages (Python, PowerShell etc.);
- Knowledge of the various Information Security Engineering/SecOps requirements within an ISO/IEC 27001/2 Framework;
- Ability and commitment to achieve industry recognised security certifications; and
- Participate within an on-call rota
Benefits
Why join Quantexa?
We know that just having an excellent glass door rating isn’t