Why we're hiring:

1. CSI: SECOPS Procedure/ Playbooks/ SOPs Development

• Develop, review, and improve SECOPS response procedures and playbooks, ensuring they are detailed and facilitate effective collaboration between SOC, IR, TH and TI; and extended bilateral work with other Cyber teams.
• Regularly review SecOps incident handling processes to identify areas of improvement and enhance cross-team collaboration.
• Assist in integrating incident response management capabilities and playbooks into security tooling.
• Continual development and integration of SECOPS procedures and playbooks with IR, TH, TI and SOC to enable timely and streamlined handling of security events. Support the SECOPS lead in developing and implementing processes to improve the team's overall capability and address technical challenges.
• Regularly report on technical challenges faced by team members and collaborate with the SECOPS lead to implement improvements.
• Lead the design and implementation of operational workflows to improve incident response time and team efficiency.

1. Collaboration & Stakeholder Engagement and Security Tool Management

• Build and maintain relationships within the IT team, Ops Assurance, Legal, external agencies, and suppliers to enhance future engagements.
• Conduct training sessions with internal teams and external stakeholders and hone the delivery of internal training on tools and technology.
• Enhance the analysis skills of Security Operations analysts by consistently researching and implementing new tools, technologies, automation and AI.
• Conduct tool testing, procurement, and training to ensure the team is equipped with the latest features and optimised for the WPP ET Cyber Security Team.

1. Incident Handling & Review

• Actively review and analyse incidents from security tools and escalate issues as needed (e.g., malware detection issues).
• Support the development of templates for handling specific security incidents, such as Potentially Unwanted Application (PUA) alerts.
• Be prepared to support all teams within SecOps with incident handling.
• Develop and sustain a familiarisation of all SecOps tools and be prepared to support SecOps security incidents, with all tools available.

1. Training & Team Development

• Manage and mentor junior team members, ensuring continuous professional development in Security Operations.
• Implement cross-skill training sessions and demos to enhance technical skills and collaboration across teams.
• Conduct monthly demo sessions for cross-skill training and improve incident response skills across the team.
• Lead the development of structured training pathways for team members to enhance their technical skills.
• Assess the team's technical skills regularly and ensure all members are prepared for live incidents.

Key Performance Indicators (KPIs)

• Development and deployment of SECOPS playbooks and procedures within defined timelines.
• Decreased Security event volumes.
• Measurable improvement in incident response times and resolution efficiency.
• Regular cross-training sessions and improved team skill sets.
• Feedback from stakeholders and internal teams regarding SECOPS operations and incident handling.

What you'll need:

Qualification Requirements (Desirable)

• MSC Information Technology degree (desirable but not essential).
• CISSP or similar (desirable but not essential).

Skills / Experience Requirements

• A broad understanding of cyber security capabilities, tools, processes, and frameworks.
• Be versatile and proactive.
• Be able to influence internal and external stakeholders.
• Able to manage multi-stakeholder projects and overcome challenges.
• Have excellent analytical, diplomatic and communications skills.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are accepting: of new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

 

What we'll give you:

Passionate, inspired people – We promote a culture of people that do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?