Lead Cybersecurity EngineerEndpoint Security Platform Security Engineering is looking to add additional Lead Cybersecurity Engineers in their Endpoint Security team. In the Endpoint Security team, you will be using an Agile approach focused on Endpoint Security technologies and processes. The purpose will be to bring the best security solutions to posture their endpoints (workstations, servers, etc.) to be protected and reduce risk, wherever possible.
National Grid is looking for lead cybersecurity engineers who have strong attention to detail, as well as the proven ability to collaborate and share technical knowledge around automation and security best practices. This role will contribute to the development and execution of the overall strategy and roadmap for endpoint security at the company. This position will be responsible for deploying new solutions (i.e.
endpoint detection and response capabilities) as well improve upon existing solutions to provide the best level of protection.Key AccountabilitiesReview and analyze all security solutions currently deployed on endpoint assets (workstations and servers)Implement security solutions allowing for reduction of agents where possibleIdentify & implement automation capabilities to reduce the human touchpoint when operational issues occurBuild documentation and playbooks for strong processes to support the security posture on systemsPartner with other stakeholders to ensure that solutions are improved upon post implementationIdentify out of the box solutions for managing security on endpointsQualificationsStrong Information Security experience in Network and Endpoint Security (i.e. DLP, Endpoint Detection and Response, File Integrity, and SIEM)In depth knowledge of Operating Systems (Linux/Windows), technology/web platforms (Server, Network, Application, Databases, Cloud)Strong scripting and programming knowledge with good understanding of language fundamentals (Python, PowerShell, Chef, Perl, Ruby etc.)Strong, demonstrable experience in Cybersecurity engineering, design, implementation and documentationKnowledge of industry-standard Information Security frameworks, policies and proceduresGood understanding of network and infrastructure (Networking protocol knowledge is an advantage- TCP/IP, HTTP, HTTPS, DNS, firewalls, proxies, IDS, IPS etc.)Preferred Technical SkillsExperience working in Agile squadsSecurity certifications (CEH, CCSP, CISSP, OSCP) and ITIL V3 certificationNetworking protocol knowledge is an advantage - TCP/IP, HTTP, HTTPS, DNS, firewalls, proxies, IDS, IPS etcSubject Matter expert skilled in the installation and configuration of endpoint security tools such as antivirus, configuration management, and asset recognition.Experience with Endpoint detection and protection toolsExperience with Security Hardening workstation to reduce attack surfaces.Knowledge of Deployment tooling such as GPO, SCCM etcCreate, review, maintain and update documentation including Documenting & Publishing fixes in central knowledge baseExperience documenting, building and testing reference architectures.Definition and monitoring of service level indicators and objectives to ensure platform healthDeployment AutomationResponsible for testing and configuring new products and technologiesExperience designing secure networks, systems and resilient application architectures