Role Responsibility

As a Junior Information Security Officer, you will:

• Be required to communicate and collaborate at technical levels of the corporation, and externally under supervision. Adapts communications to suit different audiences.
• Draft written reports, summarises technical information for a wide audience, and develops process documentation. 
• Be responsible for advising and supervising of graduate trainees/apprentices.
• Monitor the BBC’s networks for malicious activity using Security Incident and Event Management (SIEM) toolsets. This will include responding to and investigating alerts, contribution to the development of new security monitoring use cases, and ensuring all investigative activity is properly documented in our ticketing systems and followed up with relevant support teams. 
• Triage issues escalated to the information security team, and ensure that appropriate follow up actions are taken by the SOC
• Contribute to the development and maintenance of SOC documentation and processes. 
• Perform  monitoring of open source intelligence sources for potential threats against the BBC, and ensure appropriate defensive actions are taken with respect to these. 
• Conduct vulnerability scans against BBC infrastructure, and work with SOC specialist on interpreting these and following up important issues with relevant support teams. 
• Form part of the BBC’s Security Incident Response team, taking responsibility for whatever activities are deemed necessary by the incident leader.
• Deliver work on project activities assigned by Shift Leader/Head of Information Security in a timely manner.

Are you the right candidate?

Essential 

• Genuine enthusiasm for technology, information security, and a passion for learning.
• Good communication skills, both written and verbal.
• Ability to prioritise multiple workloads, knowing when to seek guidance.
• Awareness of how IT infrastructure is used at large organisations, and the role of information security operations teams in protecting that infrastructure.
• Understanding of Information Security concepts through academic/vendor/self-learning, or demonstrable practical experience of information technology support.
• Must undergo a background security check as part of recruitment process; this will include a criminal record check.

Desirable

• Experience working with 1st line ticketing/triage.
• Experience using Security Incident and Event Management (SIEM) toolsets.
• Specific experience in Splunk / big data forensic technologies.
• Experience using vulnerability scanning tools such as Nessus.
• Experience identifying and reporting on open source threat intelligence.
• Proven technical ability in Unix/Linux/etc.
• Proven technical ability in Microsoft Windows/Active Directory.
• Proven technical ability in networking systems.
• Experience with Amazon cloud hosting platforms.
• Experience with VMware virtualization.
• Experience of system forensics.
• Computer programming / scripting skills.
• Experience of malware analysis.
• Hold UK Security Clearance (or be able to obtain one).

Package Description

Band: B
Contract type: Permanent
Location: Salford

We’re happy to discuss flexible working. Please indicate your choice under the flexible working question in the application. There is no obligation to raise this at the application stage but if you wish to do so, you are welcome to. Flexible working will be part of the discussion at offer stage.

• Excellent career progression – the BBC offers great opportunities for employees to seek new challenges and work in different areas of the organisation.
• Unrivalled training and development opportunities – our in-house Academy hosts a wide range of internal and external courses and certification.
• Benefits- We offer a competitive salary package, a flexible 35-hour working week for work-life balance and 26 days (1 of which is a corporation day) with the option to buy an extra 5 days, a defined pension scheme and discounted dental, health care, gym and much more.