Technical Specialist, Cyber Security

• Support cyber security operations

o Manage cyber security operational tooling and processes to monitor, maintain and enhance our security posture.

o Support and enhance core security operations functions covering networks, infrastructure, application and data.

o Particpate in cyber security operational processes including vulnerability management, security assessments, control creation and validation, incident and event management, network and endpoint detection and response.

o Work closely with key security partners and providers to manage and enhance security services.

o Help define and set security standards.

o Investigate and implement new approaches, technologies and automation to raise the level of security and increase coverage and efficiencies.

• Ensure effective Stakeholder Management to reduce risk

o Establish relationships with key stakeholders for effective cross-team collaboration and implementation of security operations processes.

o Provide context and guidance to implement security improvements.

o Communicate progress, status, events, planned activities and issues to all relevant parties.

o Communicate technical decisions, discoveries, practices, processes, knowledge and information.

• Relevant degree/diploma (3 years) or equivalent experience

• 4 years relevant experience within the security discipline

• Hands on practical experience working in cyber security operations including incident response and blue teaming

• Experience with security technologies and processes covering identity & access management, data security, vulnerability management and general infrastructure (network, platform, cloud and endpoint) security

• May be required to assist outside of working hours

ADDITIONAL CRITERIA

• Experience in security technologies covering SIEM, EDR and NDR

• Ability to automate processes – scripting experience essential

• Ability to translate security metrics in to action

• Practical experience with the MITRE ATT&CK framework is advantageous

• Security certifications would be advantageous e.g. CISSP, GCED etc.

• Knowledge of Woolworths IT and cyber security landscape, including systemic understanding of key business linkages and dependencies

• Is aware of and responsive to internal and external events and influences on the technical landscape

• Ability to research technology-related concepts, trends and best practices, and apply findings

• Appropriately derives and organises the essence of information to draw solid conclusions

• Looks beyond symptoms to uncover root causes of problems to be solved

• Synthesises data from different sources to identify trends

• Presents problem analysis and a recommended solution rather than just identifying and describing the problem itself

• Proactively approaches others to obtain missing information

• Demonstrates a results-oriented mindset in planning and implementing activities/projects

• Clearly defines objectives and translates them into workable activities

• Monitors and tracks progress to ensure delivery of all planned commitments, and keeps the appropriate people informed

• Prepares written reports and briefs and communicates ideas clearly

• Speaks fluently in team meetings when presenting information

• Manages existing partnerships within established agreements or contracts; negotiates adjustments when mutually beneficial to do so

• Genuinely cultivates personal bonds with colleagues in order to enhance performance throughout the organisation

• Adjusts to work effectively within new work structures, processes, requirements, or cultures

• Demonstrates resourcefulness in acquiring necessary knowledge, skills and competencies to adapt to change