Job Description

Location: Leeds/Halifax/Manchester 
JD covers network security skills, it's not completely Akamai 

•    A prior background within cyber security and a passion to continuously understand and learn the latest in cyber defences. We would like to hear how we could use this knowledge to protect our customers & colleagues.
•    Good knowledge of DDoS, Bot and DNS protection.
•    Solid understanding of how cyber defence is applied through the networking layers (routing/switching, IP, network protocols, firewalls, WAF)
•    The ability to take ownership and deal with issues directly, identifying solutions to minimize blocking issues.
•    Experience engaging and support key internal relationships
You will be part of the cross discipline Digital Edge & Cyber Security Team and work with other cyber professionals across Digital Cyber Security and the wider organisation, contributing to the success of the team across multiple aspects.
The Digital Edge & Cyber Security team within Digital Frameworks deliver and maintain security solutions for our Enterprise and Digital Channels. Examples of what we focus on include, but not limited to; DDoS, Vulnerability management and threat intelligence, certification, ensuring layer 6 & 7 defences are one step ahead of cyber criminals.
 
We’re involved in all the incidents and threats to Lloyds cyber security to understand how we can mitigate future attacks. Looking to the future there will be a focus on Automation & Terraform!
You’ll also help develop and deliver cyber security solutions for the Group including critical Work with our target cloud platforms to deliver our future security software and configurations using Akamai, GCP and Azure cloud native products.
 
What do we need to see from you?
 
We like people who come from diverse backgrounds and bring new ways of thinking to the team. To be seriously considered and shortlisted we do need to see the follow as a minimum:
•    A prior background within cyber security and a passion to continuously understand and learn the latest in cyber defences. We would like to hear how we could use this knowledge to protect our customers & colleagues.
•    Good knowledge of DDoS, Bot and DNS protection.
•    Solid understanding of how cyber defence is applied through the networking layers (routing/switching, IP, network protocols, firewalls, WAF)
•    The ability to take ownership and deal with issues directly, identifying solutions to minimize blocking issues.
•    Experience engaging and support key internal relationships
•     
There are also some qualities we desire on top of the minimum criteria above, so if you have any of these things please let us know in your CV: Automation experience & associated coding skills in Python or similar, any knowledge of Cloud technologies, encryption & virtualisation/containerisation
 

͏

Do

1. Design and develop enterprise cyber security strategy and architecture

a. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses

b. Identify risks associated with business processes, operations,

information security programs and technology projects

c. Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge

d. Identify security design gaps in existing and proposed architectures and recommend changes or enhancements

e. Provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations

f. Demonstrate experience in doing security assessment against NIST Frameworks, SANS, CIS, etc.

g. Provide support during technical deployment, configuration, integration and administration of security technologies

h. Demonstrate experience around ITIL or Key process-oriented domains like incident management, configuration management, change management, problem management etc.

i. Provide assistance for disaster recovery in the event of any security breaches, attacks, intrusions and unusual, unauthorized or illegal activity

j. Provide solution of RFP’s received from clients and ensure overall design assurance