Senior Active Defence Analyst

Job Title\: Senior Active Defence Analyst

Job Location\: Preston, Frimley or Filton. Hybrid - x2 per month onsite. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role.

Grade\: GG10

You’re expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development.

We know there may be exceptional individual circumstances that impact this, in the first instance please discuss this with your line manager.

If you don’t feel you can talk to your Line Manager, you can contact your HRBP.

PLEASE NOTE Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.

Role Description\:

Working as part of a team safeguarding BAE Systems against cyber threats by developing and enhancing the Red Team capability across People, Process and Technology, ensuring an intelligence led approach to all Cyber Operations. Protecting BAE Systems through continual testing of security controls. Continuously working toward organisational, departmental, and individual objectives and upholds security standards and principles. Providing assurance to the Head of Cyber Operations and the Active Defence Manager that the SOC is performing continual testing of security controls and SOC Detection capability.

Core Duties\:

• Support the Red Team with the following activities; Red Team Exercises, Critical Control Testing, Cyber Hygiene Assessments and Penetration Testing
• Develop comprehensive and accurate reports for internal audiences, ensuring the grading of vulnerabilities within the context of BAE Systems, and passing onto resolver groups for resolution. Ensures resolution is being conducted in line with documented process
• Identify security weaknesses and misconfigurations to ensure they are raised with the appropriate resolver groups
• Contributes to the development of Red Team services through people, process, and technology where appropriate
• Maintains a broad understanding of the external threat environment and attacker tactics, techniques, and procedure

Essential Skills\:

• Proven experience in both infrastructure and web application security testing utilising proven testing methodologies
• Demonstrable experience with open-source security testing tools such as Kali and Parrot operating systems
• An understanding of software engineering principles
• Confident in delivering comprehensive and accurate security testing reports for internal audiences and delivering briefings on the outcome if required
• Broad and detailed experience of technologies including but not limited to firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, Linux, TCP/IP, Networks, Cloud, CDN's and Vulnerability Management
• Excellent oral communication skills with the confidence to interact with people at all levels within the organisation, present complex analyses and influence decision makers

The Cyber Operations team\:

Cyber Operations is responsible for protecting BAE Systems from Cyber Attack by various threat actors. Not only do we protect BAE systems and its employees, indirectly we protect those who protect us – who serve in our military and rely on the products and services we create. Across Threat Intelligence, Detection, Incident Response and now the Red Team acts to evolve cyber operations as a world class capability. All roles in Cyber Operations are supported by Immersive Labs and other training as part of our Cyber Academy.

Why BAE Systems?

Here you’ll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work - this is a place where you can grow your career with confidence and be empowered to be your best. You’ll be recognised for your contribution and enjoy rewards tailored to what’s most important to you and your family - support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make.

We welcome applications from all suitably qualified people, who are BAE Systems employees and have been in their current role for 12 months or longer.

A place where everyone can thrive\:

We’re committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.