The Caribbean's Premier Career Network
Assistant ICT Engineer – Cyber Security Centre
Job SummaryTo manage knowledge of and about security information sources on the eGovernment Network as a means to support security awareness, readiness, resilience and response to cyber incidents in keeping with the whole-of-government ICT Governance approach.
- Up-to-date documentation of SIEM operations and current environment.
- Technically detailed reports on the status of eGovernment Network; to include metrics on items such as number of logging sources; log collection rate, and server performance.
- Incorporate change management into all system changes.
- Assist in troubleshooting and problem solving a wide variety of security related issues.
- Escalation of security alerts in keeping with established procedures
RANGE OF ACTIVITIES:
- Analyze, troubleshoot, and investigate security-related, information systems’ anomalies based on security platform reporting, network traffic, log files, host-based and automated security alerts
- Implement established escalation procedures, by providing appropriate indicators, on a case to case basis
- Understand and manage file integrity verification and monitoring
- Keep abreast with and be current with emerging trends in cyber security threats
- Conduct research to identify new attack vectors against services
- Monitor endpoint security software
- Monitor information sources, including but not limited to:
- Systems and network devices
- Web proxies
- Intrusion detection and prevention systems
- Antivirus systems
- Support compliance audits
- Participate in on-call and task rotation
- Monitoring of emergent configuration management logs
MINIMUM QUALIFICATIONS KNOWLEDGE AND EXPERIENCE:
Bachelor’s Degree in Computer Science, Automation, Computer Engineering or related field from a recognized university.
- Have an appreciation of modern monitoring, alerting and related systems.
- Working knowledge of both Windows and Linux based operating systems and services.
- Quality inter-personal skills.
- Good oral and written communications skills.
- Ability to analyse problems and develop sound problem-solving models.
- Ability to exhibit initiative and to execute difficult tasks in the face of constraints and adversity.
- Ability to focus, set goals and work.
- Knowledge of computer-related technologies and practices.
- Ability to identify, gather and compile relevant technical data.
- Proactive and results oriented.
- Excellent time management skills and competence to assess priorities and manage a variety of activities in a time sensitive environment and meet deadlines with attention to details and quality.
- Ability to interact with and support end-users at various organisational levels during the different phases of the solution development or implementation life-cycle.
- People skills, and the ability to communicate effectively with various clients with the ability to explain and elaborate on technical details.
- Ability to participate in multi-disciplinary project teams.
- Initiative and a personal interest in Information Technology Security.
- Experience with change control policy and procedures.
- Excellent verbal, interpersonal and written communication skills.
- Strong analytical, problem-solving and decision making capabilities.
DECISION MAKING, PROBLEM SOLVING AND IMPACT ON RESULTS:
The incumbent is required to make decisions consistent with established and approved designs, rules, regulations and precedence, but must exercise some original thinking and creativity in solving problems to meet set deadlines. Anomalies and errors on the network may be missed that can impact the high availability of eGovernment Network and services, which can ultimately lead to public dissatisfaction.
- Responsible for optimising the use of the network monitoring system.
- NOC tools and learning resources in execution of duties.
Regular written and oral communication with the following groups/persons:
- Manager, Data Centre Services
- NOC team
- Other Department Heads
In addition to normal office conditions, the incumbent is required to travel and work away from the office including hinterland and rural locations in all ten Administrative Regions. The incumbent is also required to work outside of normal office hours, weekends and holidays, and respond to emergency call-outs when necessary.