What are the responsibilities and job description for the Cyber Security Engineer position at Davies?
Davies is a multi-award-winning operations management, consulting and digital solutions provider to organisations in highly regulated markets, including insurance, financial services, utilities, communications and to regulatory bodies. Our core services include Claims Solutions, Insurance Services Consulting and Technology and Legal Solutions.
We invest significantly in our people and their career development. Our team of over 5,000 professionals work across the UK, Ireland and North America.
Over the past five years Davies Group has consistently delivered strong double-digit growth through a combination of organic investment and via targeted acquisitions to add capability and new teams to its platform.
Reporting to the Lead Cyber security engineer, this is a hands-on role responsible for the implementation of new technical security solutions, working to industry best practises. Identifying gaps, proposing improvements testing that improvements have had a measurable impact on the organisations cyber security posture.
Davies Group Reward and Recognition
Davies Group embraces innovation, running an annual competition to generate new business projects. There are cash prizes for the top 100 entries and finalists are invited to present their idea to our investors, HGGC and Aimco. For our previous finalists, this meant a trip to San Francisco, where we visited Facebook HQ and of course The Golden Gate Bridge.
Other benefits include:
- CEO Awards – £1,250 cash prize for winners nominated by colleagues for going above and beyond. Run twice a year with 10 winners each time and an annual gala dinner to celebrate.
- Pension – match 5%
- Life Assurance (2 x basic salary)
Duties and responsibilities:
- Demonstrate string security fundamentals while working hands-on with security technologies
- Proactively assess security risks and expedite gap closure to help promote a risk aware culture
- Managing of the secure web gateways/web proxy, endpoint detection and response solutions (EDR/XDR), Microsoft Purview Firewall & email security
- Support the vulnerability management process, perform vulnerability assessments, analyse findings, establish priorities as well as implement and coordinate remediation activities
- Good knowledge on the operation of phishing simulation tools as well as supporting the delivery of security awareness programs.
- Assist, train and mentor the cybersecurity analysts in the use of security tools, application security standards, the preparation of security reports and the resolution of security related incidents.
- Act as an escalation point to analysts to aid in troubleshooting security incidents.
- Actively monitor and research cybersecurity threats, always be up to date with a direct or indirect threat landscape that could impact Davies business operations or technology Infrastructure.
- Perform threat hunting and recommend mitigation actions
- Assisting with risk management tasks.
- The monitoring and maintenance of security tools, such as Security Incident & Event Management (SIEM), anti-virus, micro segmentation tooling and vulnerability management platforms.
- Reviewing changes to determine the IT security impact.
- Assist with IT security gap and risk assessments including PCI DSS, ISO 27001, CIS Top 18 and Cyber Essentials.
- Identification and risk assessment of newly identified vulnerabilities.
- Production of relevant documentation and reporting.
- Timely escalation of issues to Cyber Team Leader.
Skills & Experience:
- Highly focused customer service approach with excellent interpersonal skills.
- Experience with the Microsoft on premise and cloud platforms
- Red teaming and penetration testing knowledge or experience
- Ability to communicate technical information to both technical and non-technical people.
- Management of third-party relationships.
- Experience of working with or within…
- software development teams to delivery internally and externally facing applications
- data teams to ensure highly available and resilient data to support operations
- technical project teams to deliver complex and large-scale infrastructure projects
- IT service desk to deliver swift resolution and fantastic customer service
- In addition to previous cyber security teams
- Ability to work under pressure and manage conflicting priorities to tight deadlines.
- Strong Stakeholder management with a focus on excellent customer service.
- Strong attention to detail, with excellent communication skills, both written and verbal.
- Proactive and self-motivated approach to problem solving.
- Flexible and approachable.
- You are self-motivated, result driven and business oriented.
- One or more relevant IT security qualifications from a recognised body, such as GIAC GSEC, Comptia CySA and ISC2 CISSP.
Other Desirable Skills:
- Experience working as part of a project team.
- Experience of working within regulated businesses.
Are you a Davies Person?
All Davies Group employees need to be able to demonstrate our Big IDEA; Inspire, Deliver, Empower and Aspire. It is essential all employees embed these behaviours in line with their job role.