Cyber Security Engineer (Cloud)
// Role Summary
Join BAE Systems as a Cyber Security Engineer (Cloud) to build and maintain SIEM environments, focusing on cloud platforms and data onboarding to protect critical infrastructure.
// Key Responsibilities
- Build and maintain SIEM environments with a focus on cloud platforms.
- Manage core environment setups and data onboarding.
- Collaborate with stakeholders to engineer technical solutions for data ingestion.
- Install, maintain, and configure cyber security toolsets.
- Ensure availability, scalability, and reliability of cyber toolsets.
- Provide on-call duties as required.
// Role Specification
About the Role
As a Cyber Security Engineer (Cloud) at BAE Systems, you will play a crucial role in safeguarding our enterprise IT infrastructure. This position focuses on building and maintaining Security Information and Event Management (SIEM) environments, with a particular emphasis on managing core environment setups and onboarding data into Cloud platforms. You will collaborate closely with stakeholders to support a variety of data ingestion routes, both well-defined and complex, engineering robust technical solutions.
This role is integral to delivering a reliable SIEM platform that our 24/7 EIT Cyber Security Operations team will utilize for monitoring and detecting potential threats. You will be part of a collaborative and committed team dedicated to maintaining BAE Systems' advanced technology-led defence, aerospace, and security solutions.
Core Duties
- Installation, maintenance, and configuration of Cyber Security Toolsets, including SIEM, SOAR, Cloud, and other protection and monitoring technologies.
- Continuous commitment towards organisational, departmental, and individual objectives, upholding security standards and principles.
- Collaboration within project teams to deliver large, complex projects across enterprise networks, including technology onboarding.
- Delivering value through effective working relationships and collaboration with colleagues in Agile, Cross-Functional teams.
- Ensuring the availability, scalability, and reliability of Cyber Toolsets, maintaining production systems and delivering future roadmap technologies.
- Providing on-call duties as required.
Essential Skills and Experience
- Good technical background and experience with Cloud and On-Premise technologies.
- Demonstrable technical knowledge of Microsoft Azure components such as Sentinel.
- Considerable understanding of firewall and networking systems.
- Diligent with close attention to detail, ensuring tickets, emails, and technical documentation adhere to team standards.
- Understanding of Git repositories and code management technologies such as Azure DevOps & Bitbucket.
About EIT Cyber Security Engineering – Team SIEM
Within EIT Cyber Security Engineering, Team SIEM is responsible for providing and maintaining the UK Cyber Security Operations Enhanced Protective Monitoring Capability (EPMC) platform. The SIEM, encompassing both on-premise and cloud-based solutions, collates system logs to create a searchable dataset for analysis. This capability empowers the EIT Cyber Security Operations Centre to effectively monitor, search, analyse, and visualise data for potential threat alerts.