Senior Security Specialist

coni+partner AG; Zürich; Vor Ort; Vertraulich; Vollzeit

Zusammenfassung

Ein innovatives Beratungsunternehmen sucht einen erfahrenen Senior Security Specialist, der für die globale Verwaltung von IT-Infrastruktur und Cybersecurity-Überwachung verantwortlich ist. In dieser spannenden Position werden Sie Cybersecurity-Monitoring-Use-Cases aufbauen, Malware analysieren und Penetrationstests durchführen, um Schwachstellen in den IT-Systemen zu identifizieren. Sie werden auch an der Entwicklung von Sicherheitslösungen und der Einhaltung von IT-Sicherheitsanforderungen arbeiten. Wenn Sie eine Leidenschaft für Cybersecurity haben und in einem dynamischen Umfeld arbeiten möchten, ist dies die perfekte Gelegenheit für Sie, Ihre Fähigkeiten einzubringen.

Qualifikationen

• Erfahrung in Cybersecurity und Bedrohungsmodellierung ist erforderlich.
• Bachelor, Master oder Ph.D. in einem relevanten Bereich ist notwendig.

Aufgaben

• Verantwortung für das Management der IT-Infrastruktur und Cybersecurity-Überwachung.
• Durchführung von Penetrationstests zur Identifizierung von Schwachstellen.

Kenntnisse

Cybersecurity

Malware Analysis

Penetration Testing

Cyber Threat Modeling

Security Code Review

IT Risk Management

Cloud Computing

Team Communication

Problem Solving

Fluent in English and German

Ausbildung

Bachelor in Engineering

Master in Computer Science

Ph.D. in Information Systems

Tools

Python

PHP

JSON

REST

Shell Scripting

Jobbeschreibung

coni + partner is a consulting firm established in 1993 with headquarters in Zurich and offices in Düsseldorf and Shanghai. Our strength lies in filling positions in line with the corporate culture, taking into account the professional competencies, references, and soft skills of the candidates.

Our client is an international bank in Zurich. We are looking for an experienced professional (m, w, d) as a

Senior Security Specialist

Aufgaben

1. As a member of a senior team, responsible for managing IT infrastructure and cybersecurity monitoring globally.
2. Build cybersecurity monitoring use cases.
3. Analyze malware and extrapolate indicators or patterns (e.g., IP addresses, hostnames, URL patterns, file artifacts, command and control).
4. Track constantly evolving malware (Dridex, Chanitor, Asprox) and exploit kits (Nuclear, Angler, RIG) and adjust controls accordingly.
5. Perform penetration testing to identify vulnerabilities in IT systems within the organization.
6. Monitor penetration testing conducted by external IT security consulting firms.
7. Correlate results with those identified during security code review.
8. Analyze cyber intelligence obtained from various information sources (OSINT, FS-ISAC, social media) and translate it into indicators and filters that can be applied to detective and preventive controls.
9. Contribute malware forensics results to the cyber intelligence community.
10. Adapt controls for various enterprise technologies using artifacts derived from other cybersecurity activities.
11. Integrate different controls and enterprise systems using different tools (Python, PHP, JSON, REST, Shell Scripting).
12. Perform manual and automated security code reviews.
13. Obtain code security tools and manual techniques to assess critical applications at various stages of the Software Development Life Cycle (SDLC).
14. Perform security code reviews in programming languages including React-Native, ReactJS, .NET Core 3.1 (C#), and Javascript.
15. Perform IT risk assessments for new projects and existing systems.
16. Ensure IT systems are compliant with internal IT security requirements and external regulatory and legal requirements.
17. Manage reports and dashboards submitted to CIOs and IT Governance.

Qualifikation

1. Bachelor, Master or Ph.D. in Engineering, Computer Science or Information Systems.
2. Knowledge of cloud computing technologies and enterprise-class security architecture.
3. Expert in cybersecurity and cyber threat modeling.
4. Expertise with high-quality enterprise information security architectures and IT risk management.
5. Experience with Secure Code Review or Static Application Security Testing (SAST).
6. Strong background in cyber offensive security and cyber threat modeling.
7. Understanding of OWASP Top 10 and CWE Top 25.
8. Experience with the implementation of security solutions.
9. Team player and communicator for multiple contacts.
10. High motivation, common sense for intelligent efficient solutions.
11. Fluent in English and German.

Please send us your documents for an initial contact by e-mail to [e-mail] or call us on [phone]. Mr. Ivano Coni would like to support you. Your application will be kept strictly confidential.

coni + partner ag

Ivano Coni

Managing Director

Klosbachstrasse 107

CH-8032 Zürich

Tel.: [phone]