Job reference number 119650
Incident Responder
Full time
Permanent
Rowland Hill House
We have an exciting new role for a Security Incident Responder based up in our Chesterfield office.
Security Incident Responder – Cyber Security
Job Purpose
RMG Cyber Security Operations primary functions are to protect information assets and detect, analyse and respond to security information and events. In support of these objectives RMG Security Operations are looking to augment their existing team through the addition of a Security Incident Responder whose primary functions will be to analyse, contain and manage security incidents in line with good practice and applicable legal, regulatory and contractual obligations
Key Accountabilities
- Incident Response: Take a leading role in security incident management activities operating with limited oversight.
- Incident Preparation: Help ensure that RMG Security Operations is ready and able to support the organization during incident response events.
- Documentation: Help review, improve, maintain, implement and embed into the organization effective security incident handling processes and procedures
- Tooling: Help identify and deploy requisite security incident handling tools to maximize response capabilities
- Threat Hunting: During down time act in a threat hunting capacity within a small team
- Reporting. Help to develop and present appropriate incident management reports KPI, KRI and other requisite reporting to the Head of Security Operations and act as an SME for projects and initiatives relevant to the role.
- Stakeholder Management. Liaise closely with RMG technology teams to ensure the correct response and remediation of security incident
- Supplier Management. Liaise closely with RMG third party suppliers to ensure the correct response and remediation of security incidents
Key dimensions
- Incident Response Skills. Demonstrable security incident response, investigative and analytical skills and the ability to see the big picture and apply the relevant detail to it. Ability to cut through the noise and working within a team environment provide clear and appropriate recommendations and direction at pace and under stress.
- Communications Skills. Demonstrable ability to clearly represent the implication of threats and risks to the business in both verbal, written, and presentational form and to make recommendations for action that enable senior leaders to take difficult decisions Clear ability to innovate and tailor messaging and delivery methods for different audiences.
- Calmness under pressure. A cool head required to think clearly under pressure and to make good timely decisions whilst keeping in pace with the emerging picture as it applies to RMG’s business risk appetite and context. Must be able to inspire confidence at senior levels of the firm and demonstrate control of events.
Key competencies:
- Previous experience as a Security Incident Responder or similar within a large, complex and technologically diverse organisation.
- Some experience of threat hunting practices, tools and procedures
- Technical and professional qualifications relevant to security technologies e.g. Certified Incident Responder
About Royal Mail:
The Royal Mail Technology team is passionate about delivering high-quality products and outstanding digital experiences to our customers. Technology is instrumental in helping us achieve our objective to be recognised as the best delivery company in the UK and across Europe
With a workforce of almost 160,000, our core network handles c.14 billion letters and c.1.8 billion parcels a year, delivering to c. 30 million addresses, 6 days a week. Our technology therefore needs to operate at scale. As a data driven business, with the largest PDA estate in the country, our systems need to handle more than 60m scan events and 1.4bn data points per day.
Royal Mail is committed to building an internal development and testing capability, driving digital innovation across the business enabling our business to transform at pace. You will be working for a brand that’s a household name and a critical part of the UK’s infrastructure.
Our technology vision is to “Enable, Digitise, Realise”:
- Enable - Create environments where open conversations are the norm and where teams work alongside each other to complement skills.
- Digitise - Utilise Technology to support the business. Making Technology thinking integral to the business. Increase the level of automation and implement connected systems.
- Realise - Invest in technology and keep taking all opportunities to consolidate systems. Focus on removing complexity within our systems and enable our cost base to decrease.
We are fully embracing Agile and DevOps, and using tools such as Alexa, Azure and Google Cloud, Chatbot, Microsoft .NET Core, Angular and mobile apps.
Our priorities include:
- Our postmen/women use 80,000 Android mobile devices and we are continuing to roll out new Apps all the time to help them to deliver a first class customer service.
- International business is one of our fastest growing areas - our IT systems have to integrate with IT systems in over 200 different territories in order for customers to track their parcels around the world.
- Continuously expanding our services to our customers, utilising predictive analytics and personalised services.
- Transforming our customer’s digital journey’s through our website which is in the top 50 most visited UK websites – with 300m visits per annum, from 100m devices, resulting in 1bn page views, with 9.2m registered users, 20m unique visitors per month, and peaking at 7m visits per day during the Christmas peak.
We are an inclusive employer with equality, diversity and fairness at the heart of our values and we’re proud to be recognised in The Times Top 50 Employers for Women 2019 for a 6th consecutive year. We welcome applications from individuals from diverse backgrounds and are committed to promoting fair participation and equality of opportunity for all of our job applicants.
We are happy to have a conversation about flexible working, depending on the role and subject to business needs.
We are an inclusive employer with equality, diversity and fairness at the heart of our values.