[6483] Security Testing Specialist

GardPass Consulting & Space; Strasbourg; Presencial; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

GardPass Consulting & Space is seeking a senior IT security professional for an onsite role in Strasbourg, France. You will define security configurations, develop baselines for OS and network devices, and perform robust vulnerability assessments and penetration testing to strengthen cyber defenses.

The role requires extensive experience with security frameworks, threat hunting, forensics, and incident response, plus hands-on work with SIEM, IAM, PKI, and DLP technologies.

Qualificações

• Master or equivalent degree with 4+ years of education after secondary school.
• 6+ years of professional IT Security experience.
• Experience with security guidelines (ISO 27001, NIST, SANS Top 20 OWASP).
• Secure configuration of servers, network devices and applications.
• Knowledge of networking protocols and application communications.
• Experience with network analysis tools.
• Security of Unix/Windows OS, middleware and apps.
• Network penetration testing and web app testing.
• Vulnerability assessments and forensics.
• Managing security technologies: Firewalls, IDS/IPS, SIEM, IAM, PKI, DLP, etc.
• OWASP and secure software development standards.
• Security code reviews, monitoring and incident response.
• Cyber threat hunting and threat intelligence production.

Responsabilidades

• Define security configuration and operations standards for security systems and applications.
• Develop and validate baseline security configurations for operating systems, applications, and networking equipment.
• Perform internal and external control and vulnerability assessments to identify weaknesses and remediate.
• Perform source code reviews.
• Conduct network and application penetration testing (Black box, Grey box, White box).
• Define detailed security architecture.
• Perform security audits and ethical hacking.
• Perform log analysis and security monitoring.
• Review IT infrastructure and application security configurations.
• Design and implement technical security mechanisms and technologies.
• Design and develop security standards and procedures.
• Configure and maintain IAM solutions (e.g. Delinea Secret Server).
• Perform digital forensics and incident response actions; review security documentation.

Conhecimentos

6 years IT Security experience

Penetration testing

Vulnerability assessment

Security monitoring

Incident response

Cyber threat hunting

Forensic analysis

SIEM

IAM

PKI

Firewall

IDS/IPS

DLP

Formação académica

Master or equivalent

Ferramentas

Delinea Secret Server

Descrição da oferta de emprego

Start date: Negotiable

EU Nationals Only

Location: Strasbourg, France 2-3 days Onsite

Tasks:

• Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances and hostbased security systems;
• Develop and validate baseline security configurations for operating systems, applications and networking and telecommunications equipment;
• Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls and recommend remedial action;
• Perform source code reviews;
• Perform network and application penetration testing (Black box, Grey box and White box);
• Define detailed security architecture;
• Perform technical security audits and ethical hacking;
• Perform log analysis and security monitoring;
• Perform IT infrastructure/ Application Security configuration reviews;
• Design and implement technical security mechanisms and technologies;
• Design and develop technical security standards and procedures;
• Configuration and maintenance of identity and access management solutions e.g. Delinea Secret Server
• Performing digital forensics and incident response actions; and reviewing security documentation

Mandatory Requirements:

• Minimum 4 years of relevant education (master or equivalent) after the secondary school.
• Minimum 6 years of relevant professional experience in IT Security.
• Experience with:
• Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.);
• Good practice in the secure configuration of servers, network devices and applications;
• Networking protocols and application communications;
• Network analysis tools;
• Securing Unix and Windows operating systems;
• Securing middleware and applications;
• Network penetration testing;
• Web application penetration testing;
• Vulnerability assessments;
• Forensic image collection and analysis;
• Manage/deploy the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services;
• Open Web Application Security Protocol (OWASP) and secure software development standards;
• Perform security code reviews;
• Security monitoring, threat detection and incident response;
• Proactively and iteratively search through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);
• Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);
• Linux administration, TCP/IP, Network Security;
• Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.