IT Sec Ops Lead

Working in the Blue Team', you will be taking the lead on all BAU Security Operation related matters, you will be responsible for defining and implementing operational procedures. You will work pro-actively to pro-actively manage Operational Security activities and be able to report on the status. Day to day you will be :

• Managing alerts from and working with external SOC provider for improved outcomes.
• Using and maintaining MDR, XDR, AV, Endpoint, Web, Proxy and other tools
• Converting findings into actions, tracking resolutions.
• Working with all other areas of Information Security and Digital including Vulnerability and Threat Management.
• The ability to report on all of the above including trending, benchmarking, posture statements and other useful actionable metrics.
• Document and update, as appropriate related information security policy, standards and processes / runbooks ensuring these are up to date.
• Support response to incidents.
• Proactively focus on matters of Cyber Hygiene as well as more advanced controls.
• Work closely with Physical and Personnel Security, particularly in connection with CNI when required.
• Respond to regulator queries via the management chain.
  
  You will be an experienced Security Operations Professional, who will bring enthusiasm, new ideas, and a passion for innovative change.
You will be a team player, with fantastic communication skills which you will be able to demonstrate through collaborative working. You will have :
• Experience of working in a generalist Information Security role
• Expertise in industry standard scanning tools
• Expertise in Threat Intelligence feeds
• Industry certifications and qualifications
• Substantial Information Security experience
• Excellent documentation and reporting skills
You will also have :
• Excellent attention to detail
• Ability to manage situations of complexity with positive outcomes
• Positive problem-solving can-do' attitude.
• Innovative ways of working.
• Ability to summarise complex findings to management.
• A solid understand of the differences between a Corporate and ICS / OT environments, All applicants must be eligible to live and work in the UK. You will need to provide evidence of eligibility (e.g. a passport or long birth certificate and proof of NI) and current proof of address (dated within the last 3 months), will be required as part of the recruitment process.
  
  This role will be full time Monday to Friday with a hybrid approach to working between our Durrington office and home, with occasional travel to other sites across the Southern Water region.
We are offering a salary of up to £70,000 per annum depending on skills and experience as well as other benefits including :
• Generous pension up to 11% company contribution
• 25 days annual leave
• Life assurance equal to 4x salary
• Salary sacrifice electric car scheme (after 6 months service)
• Health Cash Plan
• Full funded eye tests
• Two paid volunteering days a year
• Occupational health service
• Discounts with over 800 popular retailers
• Digital GP service
• Study support may be available for job-related qualifications
• Competitive maternity leave and flexible return to work options
• Cycle to work scheme
Join our InfoSec team and see how far your career could progress with a company committed to career progression, training and development opportunities, our customers and the environment. Does this opportunity excite you but you're not 100% sure if you meet all the requirements for the role? Or are you concerned that normal' office hours aren't possible given your personal circumstances? Whilst we can't accommodate every flexible working request, we'll try to find a practical solution. So why not engage with us and find out more about this role? If this role isn't quite what you're looking for but are keen to be contacted about opportunities at Southern Water, you can register your details here : Introduce Yourself (myworkdaysite.com) Our customers are at the heart of everything we do, because delivering water for life is our core purpose. To achieve this, we need 24 / 7 support in place to resolve incidents quickly and efficiently. All our employees understand the importance of out-of-hours incident support because when problems appear, fixing them is our top priority. That's why our people join together and support when and however needed to make sure our customers get the service they deserve.