At Smiths we apply leading-edge technology to design, manufacture and deliver smarter engineering solutions for mission-critical applications, solving some of the world's toughest problems for our customers, our communities and our world. We are a FTSE100, global business of around 15,000 colleagues, based in 50 countries. Our solutions have a real impact on lives across the planet, enabling industry, improving healthcare, enhancing security, advancing connectivity, and supporting new homes. Our products and services are often critical to our customers’ operations, while our proprietary technology and high service levels help create competitive advantage. We welcome colleagues with a curious mind, who are happy with responsibility, enjoy a challenge and are attracted by the idea of working at a business with an almost 170-year history of innovation, and four global divisions, all experts in their field. 

This role is responsible for daily and real-time monitoring of cyber security tooling and environments and the provision of Level I and II cyber security incident management to include:

• Detection and Analysis

• Containment, Eradication

• Recovery

• Reporting

• Remediation (Triage, Incident Handling and Threat Hunting)

In addition to monitoring and incident management, the position is responsible for providing cyber security subject matter expertise, service management, and hands on administration of advanced cyber security tooling as assigned. Specific service management and administration assignments will vary by individual and may include services such as System Information & Event and Management (SIEM), Vulnerability and Patch Management, Data Leakage Protection, User Rights Management, Conditional Access or CASB, Application Whitelisting, Firewall management, and Anti-Malware. The position also supports road mapping, projects and risk assessments, policy management, reporting, and cross-training. The role will require working within the Security Operations Centre (SOC) and requires flexibility across all times zones as it involves engagement with colleagues from all locations of the global business.

• Monitor cyber information, events, alerts, and ticketing queues to identify security events and threats across multiple technologies to ensure security incidents are identified timely

• Proactively research and maintain a proficiency in current and emerging threats, vulnerabilities and security technology developments

• Evaluate and utilize intelligence for new threats and vulnerabilities to ensure protective monitoring is capable of detecting potential new attacks

• Provide assurance of security posture through monitoring security system status

• Respond to tickets and incidents as assigned

• Support the incident and problem response process through to closure

• Act as Level II SME escalation; work with internal and external individuals in preparation and when necessary, remediation/suppression

• Support, maintain, and tune security tooling and systems as assigned

• Support and maintain operational procedures and documentation

• Ensure timely accurate communications of alerts to stakeholders responding to escalations, or will escalate if required as per the agreed processes

• Work collaboratively with BIS teams to position information security as a key enabler within each service area

• Make recommendations of countermeasures, mitigating controls, best practice configuration and processes to improve operational effectiveness and efficiency within security operations

• Proactively support the secure delivery of BIS strategies and delivery objectives

• Minimum 4 years of proven work experience as a Cyber Security Analyst or similar role

• Minimum 2+ years hands-on firewall administration – preferably in a SOC environment

• Professional information security certifications such as CompTIA Security+, CEH, GIAC, CISSP, CISM, CCNA Security, CCNP Security or CISA required

• Excellent communication skills with the ability to engage with a variety of different people

• Strong analytical skills and problem-solving capabilities with attention to detail

• Ability to work well with others, with an emphasis on virtual teams across multiple time zones

• Recognize and respond to potential, successful, and unsuccessful cyber-attacks and compromises thorough reviewsand analyses of relevant event detail

• Subject matter expertise in multiple security technologies and across the cyber security body of knowledge

With colleagues stretching across the globe, we are proud of our diversity. To foster inclusivity, we run employee resource groups (ERGs) to provide a safe space for employees to connect and support each other. Our cross-business ERGs include Veterans, Pride Network, Black Employee Network, Women@Work Network, and Neurodiversity. 

Across our company, we recognize excellence, culminating in the Smiths Excellence Awards, our annual celebration of the most extraordinary activities, people, and projects that best showcase our strengths and help drive our business forward. We announce these on our annual Smiths Day, a global celebration of Smiths around our network. 

Join us for a great career with competitive compensation and benefits, while helping engineer a better future. 

We believe that different perspectives and backgrounds are what make a company flourish. All qualified applicants will receive equal consideration for employment regardless of race, colour, religion, sex, sexual orientation, gender identity, national origin, economic status, disability, age, or any other legally protected characteristics. We are proud to be an inclusive company with values grounded in equality and ethics, where we celebrate, support, and embrace diversity.

At no time during the hiring process will Smiths Group, nor any of our recruitment partners ever request payment to enable participation – including, but not limited to, interviews or testing. Avoid fraudulent requests by applying jobs directly through our career’s website (Careers - Smiths Group plc)