InfoSec Engineer

Oxford Nanopore has developed a new generation of nanopore-based sensing technology for faster information-rich accessible and affordable molecular analysis. The technology is used to understand and characterise the biology of humans animals plants bacteria viruses and diseases such as cancer. By enabling biological insights we strive to improve life on Earth and beyond.

We are looking for an experienced individual to join our Information Security team as an Information Security Engineer in a fast-paced organisation.

The Details

The InfoSec Engineer in responsible for enhancing the cybersecurity defences of ONTs information systems.

This role will lead the design testing identification and communication of security weaknesses to stakeholders across ONT and improve security controls and practices.

The role looks to fully exploit the security tools available and enhance ONTs technical assurance activities working alongside Global IT teams to implement proactive security configurations including Endpoint Detection and Response (EDR) Security Information and Event Management (SIEM) User Entity and behaviour Analytics (UEBA) Secure Web Gateway (SWG) Data Loss Prevention (DLP) email filtering and vulnerability scanning tools.

The InfoSec Engineer has the opportunity to uncover security flaws and control weaknesses across Oxford Nanopores IT and application estate while performing security operations functions to bolster the Managed Security Operations Centre (MSOC) in order to protect Oxford Nanopore and its information and respond in a timely manner to cyber threats.

Key Responsibilities:

• Develop the blue team and threat hunting capability to harden and enhance the technological controls on Oxford Nanopores IT estate.
• Detect and assess vulnerabilities across Oxford Nanopores IT and work through to successful resolution.
• Work with the MSOC and as part of the Incident Response Team to triage incidents identifying false positives.
• Work with third parties to securely configure the platforms contributing to Oxford Nanopores security stack: EDR SIEM/SOAR SWG DLP and vulnerability management.
• Advise on security architecture improvements: changing vendors enhancing services and identifying solutions.
• Produce high-quality technical documentation.

You might be a good fit if you have:

• An interest in uncovering security flaws.
• Previous experience with incident response and can bring suggestions on good practices that suit Oxford Nanopore.
• This role requires a self-learner and individual who continually seeks to expand their knowledge and skills.
• An enthusiasm for self-learning and continually expanding ones knowledge and skills.
• The ability to work as part of a wider team and be confident in making decisions.
• High attention to detail with excellent organisational and planning skills.
• Experience of security incident management.

Preferred Skills and Experience:

• Knowledge of security frameworks and standards such as ISO27001 NIST 800-53 CIS.
• Relevant undergraduate degree or relevant experience.
• Previous experience in a similar role such as engineer analyst or specialist.
• Understanding of MITRE attack framework.
• Cybersecurity certification such as OSCP OSDA CRTO GPEN CDSA or similar.
• Experience with vulnerability scanning tools like Qualys or Nessus.
• Familiarity with software engineering or application security.

Please note that no terminology in this advert is intended to discriminate on the grounds of a persons gender marital status race religion colour age disability or sexual orientation. Every candidate will be assessed only in accordance with their merits qualifications and abilities to perform the duties of the job.

#LI-JR1

#LI-hybrid