Role Purpose

Leading and managing the strategy, architecture, engineering and control ownership of cyber capabilities and infrastructure defences. Protects the group from cyber threats which seek to impact the confidentiality, integrity and availability of group assets. Domain area Vulnerability & Threat Management.

Technical / job functional knowledge

• Knowledge and experience of the architecture, engineering and operation of vulnerability and threat management technology. Discovery and classification of vulnerabilities across systems and platforms. Guidance & assurance aspects of remediation. Level of knowledge in the domain technology area would be considered as an expert.
• Architecture and engineering of layered control capabilities.
• A strong understanding of information security principles and best practices.
• Adversary Tools, Techniques and Procedures. A deep understanding of TTP's is required.
• Threat Modelling experience.
• Broad technology and security knowledge across non-core domain area.
• Modern engineering practices, automation to drive efficiencies. Infrastructure as Code mindset. Code / scripting for practical tasks and tool integrations.
• Structured and methodical troubleshooting practices for resolving the most complex problems.
• Policies, standards and security frameworks, NIST, CIS.
• Risk and control, management, monitoring and reporting.
• Experience of project management and service management as it relates to the delivery of services for the domain area.
• The role holder is likely to hold one or more of the following security or engineering/architecture specific certifications, CISSP, OSCP, TOGAF, GIAC or those relevant to the role/domain area.