Cyber Response and Recovery - Assistant Manager (Proactive) in London

Overview

Cyber Response & Recovery Assistant Manager (Reactive DFIR). This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance.

About the role

The Cyber Response & Recovery Assistant Manager role will be working in the Cyber Response Services (CRS) Team within our Advisory practice.

Your focus will be in the domain of reactive digital forensics and incident response (DFIR), acting as a junior case manager on smaller cases, or as part of a team (reporting to a case manager or senior case manager) on larger cases.

This is a hands-on role with the opportunity to join a high performing team that works with a wide variety of clients, as KPMG is one of only nine tier 1 responders in the UK.

You will gain substantial experience quickly and may be put through a range of security certifications.

The role requires someone with an emerging strong technical background, experience in incident response and digital forensics, and a desire to grow into an incident response manager role within a growing team.

You will be expected to work in a team with ongoing incident response cases.

When not responding to incidents, you may help clients build their in-house incident response capabilities, which could include building and developing cyber-response tools, authoring and adapting runbooks/playbooks, assessing incident response maturity, and assisting in table-top cyber-scenario exercises.

When not engaged in client work, you will help develop our own delivery capability, including operational efficiency, standard operating procedures, team learning and development, tooling and platforms, lab development, and orchestration.

What will you be doing?

• Perform incident response activities during cyber security incidents for our clients (this includes being available to work on-call monthly).
• Carry out digital forensics of relevant incident data (disk, volatile memory, network packets, log files).
• Maintain a current view of the cyber threat and advise clients on the threat landscape and attacks which may be relevant to them.
• Liaise with clients on delivery, implementation and project issues.
• Ability to generate well-structured responses to bids and requests for proposals.
• The Person

You should have a strong background in cyber-security and incident response.

For example, you should be able to guide a client through an unstructured incident response process (such as an advanced network intrusion) — managing resources and defining objectives at each stage of the incident response process; scoping and triage, containment, evidence preservation and extraction, eradication, recovery, forensic analysis and investigation.

• A broad understanding of the cyber security threat landscape.
• Strong technical background in computers and networks, and programming skills.
• Proven experience of dealing with cyber security incidents and associated response measures.
• Understanding of a wide range of information security and IT methodologies, principles, technologies and techniques.
• Excellent interpersonal, written and communication skills.

Skills we\'d love to see / Amazing Extras

The successful candidate will demonstrate competency in computing and networks as well as in cyber-security either by having relevant work experience, completing a degree, or obtaining industry-relevant certification.

The qualifications listed should be seen as means to demonstrate competency and not as strict requirements.

Location

Our core hubs for this role are London (Canary Wharf) or Manchester (St Peter\'s Square).

You must be within commutable distance to one of these locations.

Current policy is 60% of the week with clients or our offices, 40% elsewhere (which can include working from home).

#J-18808-Ljbffr