Cyber Security Analyst L4 in Bristol

Job Description

JD: Halifax/Bristol

In-scope technologies/products:

Supporting Products within the Digital Edge & Cyber Security Product Offerings –

– Mainly CDN to secure and optimise the banking infrastructure

– SSL Handshake

– EDGE load implementation for Web Apps

Skillsets required:

Understanding of Networking and Cybersecurity principles including –

– DNS Resolution and IP

– HTTP/S Methods, Headers, Status Codes

– TCP handshake

– OSI Model and Communications Framework

– Attack Vectors and Methods such as DDoS, SQL, CSS, CMD Injection, LFI and Web Protocol Attacks, Botnet

– Certificates and TLS Encryption

– Caching and Storage on Edge

– Content Delivery Network and Edge Computing

– Border Gateway Protocol (BGP) and ACL’s

– Zero Trust Architecture

– Load Balancing

– Threat Intelligence, SIEM Data and Traffic Reporting

– Proxies and Reverse Proxies to manage Ingress/Egress

– Cloud infrastructure, particularly

Í

cope of services:

Mainly via CDN to secure and optimise the banking infrastructure:

– Ability to carry out WAF/Security/Bot Manager Reviews Inspection of traffic to the edge and origin to determine threats/vulnerabilities

– Implement Alerting and Monitoring appropriate for system errors and threats

– Generation and Upload of Certificates for SSL handshake

– Implement load balancing capabilities at the Edge for Web Apps

– Implement path based routing of client traffic to relevant infrastructure

– Proactively manage security configurations associated with hostnames by interacting with the application teams for max availability, smallest attack surface prioritisation

– Ability to implement caching and storage

– Ability to edit/Implement sorry pages that handle errors effectively on Net storage based on use case

– Validation and implementation of different HTTP methods based on Application requirements – security implications of this and mitigation

– Respond to both production and pre-production incidents in a timely manner.

– Support teams on digital modernisation journey with technical debugging both in the Akamai layer and downstream infrastructure

Mandatory Skills: Akamai WAF .