Interim Cyber Security Officer

6-month contract opportunity with a local authority

Summary

Key Responsibilities

• Lead the deployment, configuration, and ongoing management of the CrowdStrike Falcon platform, including endpoint protection policies.
  


• Collaborate with the SOC provider to design, optimize, and maintain Splunk dashboards, alerts, and security data models.
  


• Serve as a technical escalation point for high-severity security incidents, facilitating rapid investigation, containment, and remediation using EDR and SIEM tools.
  


• Develop and implement SOAR workflows to automate detection, response, and security operations processes.
  


• Conduct proactive threat hunting using SIEM/EDR data and MITRE ATT&CK-aligned techniques.
  


• Support vulnerability assessment and security scanning activities using relevant tools.
  


• Provide input into penetration testing activities and interpret findings for remediation.
  


• Deliver training, coaching, and knowledge transfer to enhance the existing cybersecurity team's skills in CrowdStrike, Splunk, and threat analysis.
  


• Contribute to the development of security policies, standards, and technical documentation as needed.
  

Requirements

Additional Information