IT Security Expert

We are seeking a seasoned IT Security Engineer to join our team. The role involves defining security configurations, performing assessments, and driving remediation across systems and applications. Role: IT Security testing Expert Location: Strasbourg, France Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances and hostbased security systems; Develop and validate baseline security configurations for operating systems, applications and networking and telecommunications equipment; Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls and recommend remedial action; Perform source code reviews; Perform network and application penetration testing (Black box, Grey box and White box); Define detailed security architecture; Perform technical security audits and ethical hacking; Perform log analysis and security monitoring; Perform IT infrastructure/ Application Security configuration reviews; Design and implement technical security mechanisms and technologies; Design and develop technical security standards and procedures; Configuration and maintenance of identity and access management solutions e.g. Delinea Secret Server • Performing digital forensics and incident response actions; and reviewing security documentation Mandatory Requirements: Minimum 4 years of relevant education (master or equivalent) after the secondary school. Minimum 6 years of relevant professional experience in IT Security. Experience with: Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.); Good practice in the secure configuration of servers, network devices and applications; Networking protocols and application communications; Network analysis tools; Securing Unix and Windows operating systems; Securing middleware and applications; Network penetration testing; Web application penetration testing; Vulnerability assessments; Forensic image collection and analysis; Manage/deploy the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services; Open Web Application Security Protocol (OWASP) and secure software development standards; Perform security code reviews; Security monitoring, threat detection and incident response; Proactively and iteratively search through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting); Security operations engineering (e.g. implementation of defensive measures, threat intelligence production); Linux administration, TCP/IP, Network Security; Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc. One of the following Certifications: Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP); Certified Information Security Manager (CISM); Certified Information Systems Auditor (CISA); OSCP, OSCE, GPEN, CEH, CCNA, CCNP. Interested? Apply now at [email protected]