Senior Associate

Purpose of Position

The Senior SecOps Engineer’s primary responsibility is to provide Pantheon with in depth technical expertise working in Pantheon’s IT Security Team. The Senior SecOps Engineer will also participate in technical research and development to enable continuing innovation within the IT security landscape at Pantheon.

The role incumbent must be proactive and will act upon and resolve incidents within agreed Service Level Agreements. Must be willing to work unsocial hours when requested to achieve business critical deliverables and take responsibility for ensuring that customer satisfaction is always maintained. Will be required to develop skills and knowledge and transfer them to the SecOps Team.

The Senior SecOps Engineer may also be required to provide directed support and service for other Pantheon offices around the world.

Key Responsibilities

• Governance – ensure all solutions are implemented in accordance with Pantheon’s security best practice.
• Adhere to applicable regulatory and compliance related operating requirements.
• Work with systems development and external suppliers to resolve often highly technical or contentious security issues and conflicts to ensure that projects and work packages are delivered on time and within budget.
• Actively review, monitor and improve network and cloud infrastructure security, undertake a regular programme of self-audit and base lining by utilising the appropriate tools and in conjunction with formal audits as conducted by both internal audit and external audit & penetration testers.
• Ensure changes affecting security infrastructure take place in a controlled and auditable manner.
• Participate in “On Call” support processes.
• Create and maintain documentation sets as required.

Knowledge & Experience Required 

• Integration of physical security and application security architecture through close teamwork with the architects and solution developers.
• Taking responsibility for the security of the physical and cloud architecture.
• Scoping of problem and presentation of technical solution options.
• Assisting with identification of the physical architecture tasks and dependencies.
• Delivery of robust and fully tested technical security solutions and services.
• To provide excellent customer service, ensuring high levels of communication and managing problems through to completion in line with service levels.
• Strong experience working with public cloud platforms with a particular focus on Microsoft Azure including but not limited to PaaS/Key Vault/Bastion/NSGs/PrivateLinks.
• Experience with Azure AD Premium 2 including Single Sign on configuration.
• Experience working with Microsoft Server environments) including server 2016/2019 and common desktop environments using Windows desktop operating systems such as Windows 10.
• Working knowledge of Microsoft Active Directory and its associated tools. (Domains & Trusts, Sites and Services, Users & Computers, Distributed File System, DHCP & DNS etc).
• Knowledge of virtualisation technologies such as Microsoft Hyper V.
• Strong experience with Scripting languages such as Python/Powershell/KQL.
• Strong experience of the Microsoft M365 E5 security suite.
• Strong experience of Log Analytics and Azure Sentinel.
• Strong experience working with Cisco networking products including ASA firewalls, Meraki Network infrastructure, Cisco Umbrella and Cisco ISE.
• Strong experience working with Cyber security products including DLP, SIEM, IDS/IPS.
• Strong experience working with advanced penetration test and audit tools notably Kali Linux.
• Knowledge and experience working with at least one of the IT security frameworks such as NIST 800 series/ISO27001/CIS control suites.
• Offensive Security mindset.
• Proven excellent customer service skills.
• Sound relationship management and communication skills.
• Excellent working knowledge of core Microsoft products; Word, Excel, PowerPoint, Outlook, Visio and Project
• Demonstrable commitment to quality, service and problem management.
• Strong interpersonal skills and excellent time management skills are essential.