C005161 Network Security Tool Manager

A security operations centre can only detect what it can see. You would own what it sees with.
A multinational defence organisation in Mons needs one person to properly own its security monitoring,traffic aggregation and packet capture platforms across many networks, sites and data centres.
What you would be doingRunning the network visibility and security monitoring capability the operations centre depends onOwning the full lifecycle of these platforms: deployment, upgrades, obsolescence and decommissioningTuning monitoring, aggregation and packet capture so the collected data is complete and usefulWatching platform health, data quality, retention and storage, and closing visibility gapsTroubleshooting Linux, network and data collection problems across the monitoring estateWorking with analysts and detection engineers so coverage keeps up with what they need to findCapacity planning, audit support, site surveys and taking part in cyber defence exercisesWhat you would bringExpert knowledge of network security monitoring and cyber defence operationsHands-on experience with large, distributed monitoring across many sites or data centresEnterprise work with tools such as Firepower, Corelight and NetWitnessStrong network visibility, packet broker and packet capture experienceLinux and network troubleshooting down to packet flow and interfacesA cyber security certification such as CISM, CISSP or GIACA relevant degree with two years of experience, or six years of progressive experience insteadFluent professional EnglishWhy this one is worth a lookIf you know the difference between a dashboard that is green and a capture that is actually complete, this one is for you.