Security Engineer - SIEM / DLP / Firewall / Remote

GSA Techsource are currently recruiting for a Security Engineer to work with a Global IT Service provider. This is a remote working position for an initial 6 months with high likely of an extension.

Analytics

Help develop security and operational tools, policies, and rule bases to monitor and analyse the security posture of the IT estate and identify anomalous activity and behaviours.

Help to refine and develop dashboards and reports to continuously improve security situational awareness.

Help in the production of reports and MI to present activity and outcome of operational security services improvements.

Operate and improve upon existing policies and ruleset for tooling such as: -

- NAC
- Firewall
- IDPS
- SIEM
- DLP
- EDR
- NBA
- UBA

Endpoint detection

- AV
- DLP
- HIPS
- HFW

Experience with any of the following would also be highly beneficial: Q Radar, Sentinel, ATP Defender and Attack IQ.

This role is inside IR35.

GSA Techsource Ltd operates as an Employment Agency when recruiting for permanent vacancies, and an Employment Business when recruiting for contract vacancies. All contract rates quoted are to Ltd companies.