Beschreibung
Function Description:
This job will allow you to join the "Cyber Security program" team within the "Enterprise Support Services" department. The Cyber Security Program is responsible for rolling out the Cyber security services.
In this role you will be responsible for the design and engineering of:
- the security Monitoring and Cyber Defense platform,
- the architecture of the security Perimeter,
- the security aspects of Business projects.
Your most important challenges will be:
- deployment, maintenance and troubleshooting of the Cyber Defense platform, including security detection & monitoring tools, infrastructure to collect, store and correlate logs in order to effectively detect and investigate intrusions,
- technical documentation of the Cyber Defense platform; including installation and maintenance guides, architectural diagrams and data feed on boarding processes,
- identify the appropriate data feeds to collect, oversee proper collection and parsing of data feeds, and develop correlation content that leads to security events of interest,
- develop new content based on threats and refine existing content for efficiency,
- investigate complex Security incidents,
- guarantee Security controls are implemented to ensure compliance to the Group security policies in the different projects,
- write documents, processes and intern trainings targeted to operational teams,
- provide support to operational departments during the Bring Into Service and rollout phases,
- be third line support for the troubleshooting of operational problems, and escalate to Vendors if needed.
- Be part of the RFP evaluation team driven by the Pillar leads or project manager.
Profile:
Technical Competences:
* Knowledge of SIEM (HP Arcsight), installation, configuration & integration
* Practical knowledge of security systems en deep knowledge of security solutions (eg. Firewall, DMZ, SSL/IPSec VPN, Proxy, Remote Access, PKI )
* Juniper (Netscreen!) and/or CheckPoint technologies
* Cisco technology (eg. Cisco certification)
* Knowledge of general network environment (LAN, WAN, WiFi, Routers, Switches)
* Network communication protocols (Ethernet, TCP/IP, MPLS)
* Application Penetration knowledge (eg. XSS, buffer overflow, URL tampering, SQL Injection, dDoS, Botnet, )
* Scripting capabilities skills (eg. Perl/Python, regex, DataBase Queries)
* Knowledge of Network Intrusion Detection elements (IDS/IPS, anomaly detection tool)
Other competences:
* University diploma, or an equivalent experience can be demonstrated (eg. Civil/Industrial Engineer, Licence in IT)
* 3 to 5 years experience in the Security domain (IT or Network domains are also valuable)
* Presentation and communication skills
* Team player
* Understanding of operational methods and procedures
* Flexible
* Being open to fast changing new technologies