BUSINESS ANALYST L5(CONTRACT) in Sheffield

The role focuses on container security within the technology and security domains, with responsibilities spanning governance, collaboration, and execution to support secure container adoption across the organization.

Responsibilities:

• Contributing to the container security program objectives, implementing solutions, defining standards and best practices to continually advance a secure enterprise container adoption program.
• Providing expert guidance and hands-on advice on container security to security control owners, including input to control documentation and metrics.
• Partnering with key stakeholders; engineering application teams, Container Security Architecture team, SDLC Federated Control Owners, Enterprise Risk Management (ERM), CCO Technology, Cybersecurity Risk & Control Strategy and Cybersecurity Business Engagement.
• Partnering with Information Technology Service Owners to integrate container security tools into their containers lifecycle to give them early insight into potential issues that would impact 'go live'.
• Defining and implementing observability requirements to enable timely identification of high-risk breaks, drifts, vulnerabilities.
• Conducting security assessments of strategic and preferred containers platforms/workloads by leveraging observability provided by control operators e.g. image build process, orchestration, and deployment pipeline.
• Providing input to the Security Operation Center (SOC) and Incident management team as necessary in responding to security incidents within containers platforms.
• Ensuring containers ecosystem comply with relevant industry regulations and standards (e.g. PCI-DSS, NIST, CIS).
• Support continuous capabilities assessments by setting up containers environments for assessing new security tools functionality and onboarding requirements.

What you will bring to the role:

• Experience of working with containers (Kubernetes/other container orchestration; AWS, GCP, Azure, AliCloud).
• Experience of working on cloud platforms e.g. deploying cloud workloads and infrastructure.
• Experience in automation scripting e.g. Terraform, cloud formation, helm charts etc.
• Experience on integration & automation of various security technologies especially container security tools (e.g. scanners, CNAPP, etc.) within DevOps tooling pipeline (Jenkins, GitHub, Chef, Ansible, Nexus, etc).
• Experience in a major programming language such as Python or Java, and associated tooling (Git, Maven, IDEs, Jenkins, Github etc.).
• Experience of security fundamentals with relation to a k8s platform and DevSecOps.
• Highly motivated self-starter with excellent interpersonal and problem-solving skills.
• Strong oral and written communication skills.

Location: The role-holder is expected to engage with stakeholders and their teams, which could be up to 3 days a week in the office.

Deliver:

• Customer Engagement and Delivery Management PCSAT, utilization % achievement, number of leads generated from the business interaction, number of errors/gaps in documenting customer requirements, feedback from project manager, process flow diagrams (quality and timeliness), % of deal solutioning completed within timeline, velocity generated.
• Knowledge Management: No. of whitepapers/research papers written, no. of user stories created, % of proposal documentation completed and uploaded into knowledge repository, number of reusable components developed for proposal during quarter.

Mandatory Skills: Threat Modeling.

We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.