At a Glance
- Tasks: Lead cybersecurity initiatives, optimise Splunk dashboards, and respond to high-priority incidents.
- Company: A forward-thinking London Council focused on enhancing cybersecurity.
- Benefits: Hybrid work model, competitive pay, and opportunities for professional growth.
- Other info: Collaborative environment with a focus on continuous learning and development.
- Why this job: Join a dynamic team and make a real difference in protecting digital assets.
- Qualifications: 5+ years in Cyber Security, expertise in CrowdStrike and Splunk required.
The predicted salary is between 60000 - 80000 £ per year.
A Council in London is seeking a Contract Senior Cybersecurity Engineer for 6 months. With the strategic deployment of an outsourced Security Operations Center (SOC) that leverages Splunk and CrowdStrike, the Senior Cyber Security Engineer role is a key addition to our team to maximise the timeline and investment. The ideal candidate will be a technical expert in CrowdStrike for endpoint protection and Splunk for security telemetry, capable of turning raw data into actionable intelligence.
Key Responsibilities
- Endpoint Strategy: Lead the deployment, policy configuration, and maintenance of the CrowdStrike Falcon.
- SIEM Mastery: Work with our SOC partner to architect and optimize Splunk dashboards, alerts, and data models to identify sophisticated threats.
- Incident Response: Serve as a technical escalation point for high-priority security incidents, utilizing EDR and SIEM tools for rapid containment.
- Automation: Develop 'SOAR' workflows (Security Orchestration, Automation, and Response) to reduce manual intervention and improve response times.
- Threat Hunting: Proactively search for undetected malicious activity using specialized queries.
- Training: Build up the Crowdstrike, Splunk and Security Analysis skills within the existing team.
Required Experience
- Experience: 5+ years in a dedicated Cyber Security Engineering or SOC Tier 3 role.
- CrowdStrike Expert: Deep hands-on experience with Falcon Prevent, Insight, and Discover. Certification (CCFA/CCFR) is a major plus.
- Splunk Power User: Proficiency in writing complex Search Processing Language (SPL) and managing Splunk Enterprise Security (ES).
- Technical Breadth: Strong understanding of network protocols, cloud security (AWS/Azure), and the MITRE ATT&CK.
- Vulnerability Assessment: 2+ years using VA tools would be a bonus.
- Penetration Testing: Exposure to Penetration Testing and Web Application Testing.
Senior Cyber Security Engineer - Hybrid in London employer: Morgan Law
Contact Detail:
Morgan Law Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Cyber Security Engineer - Hybrid in London
✨Tip Number 1
Network, network, network! Get out there and connect with people in the cyber security field. Attend meetups, webinars, or even local events. You never know who might have a lead on that perfect Senior Cyber Security Engineer role!
✨Tip Number 2
Show off your skills! Create a portfolio or a personal project that highlights your expertise in CrowdStrike and Splunk. This can really set you apart from other candidates when you're chatting with potential employers.
✨Tip Number 3
Don’t just apply for jobs; engage with the companies you’re interested in. Follow them on social media, comment on their posts, and share relevant content. This shows your enthusiasm and can help you get noticed!
✨Tip Number 4
Finally, make sure to apply through our website! We’ve got loads of opportunities that might be a perfect fit for you. Plus, it’s a great way to ensure your application gets seen by the right people.
We think you need these skills to ace Senior Cyber Security Engineer - Hybrid in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience with CrowdStrike and Splunk. We want to see how you've used these tools in past roles, so don’t hold back on the details!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Tell us why you're passionate about cybersecurity and how your skills align with our needs. Keep it engaging and relevant to the role.
Showcase Your Technical Skills: Be specific about your technical expertise, especially with EDR and SIEM tools. We love seeing examples of how you've tackled high-priority incidents or developed automation workflows.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for this exciting opportunity!
How to prepare for a job interview at Morgan Law
✨Know Your Tools Inside Out
Make sure you’re well-versed in CrowdStrike and Splunk. Brush up on your knowledge of Falcon Prevent, Insight, and Discover, as well as your ability to write complex SPL queries. Being able to discuss specific examples of how you've used these tools in past roles will really impress the interviewers.
✨Showcase Your Incident Response Skills
Prepare to discuss your experience with high-priority security incidents. Think of a few scenarios where you acted as a technical escalation point and how you utilised EDR and SIEM tools for rapid containment. This will demonstrate your hands-on experience and problem-solving abilities.
✨Highlight Your Automation Experience
Since automation is key in this role, be ready to talk about any 'SOAR' workflows you've developed. Share specific examples of how you’ve reduced manual intervention and improved response times in previous positions. This shows that you can bring efficiency to the team.
✨Be Prepared for Technical Questions
Expect some deep technical questions related to network protocols, cloud security, and the MITRE ATT&CK framework. Brush up on these topics and think of how they relate to your past experiences. This will help you demonstrate your technical breadth and expertise.