Cyber Security Engineer

Stott and May; Strasbourg; Presencial; EUR 83 000 - 131 000; Tempo integral

Resumo da oferta

Stott and May Inc. in Strasbourg, France seeks a Senior ICT Security Testing Specialist for a 12-month freelance engagement. You will define security standards, perform hands-on testing and audits, and support monitoring and incident response on-site in Strasbourg.

The role requires 6+ years in IT security, strong knowledge of ISO27001/NIST/SANS/OWASP, and expertise in penetration testing, IAM, and incident response. On-site work preferred with EU access.

Qualificações

• Master's degree or equivalent (minimum 4 years of higher education).
• 6+ years of professional experience in IT Security.
• Advanced knowledge of ISO 27001, NIST, SANS Top 20 and OWASP.
• Network and web application penetration testing, and vulnerability assessments.
• Securing Unix/Linux and Windows systems, middleware and applications.
• Strong grasp of TCP/IP, networking protocols and network analysis tools.
• Forensic image collection and analysis.
• Hands-on experience with firewalls, IDS/IPS, SIEM and IAM.
• APT detection, DLP and PKI.
• Endpoint and mobile security; encryption and remote access.
• Patch management, and backup/disaster recovery.
• Virtual environments and wireless security.
• One or more of: CISSP-ISSAP, CISM, CISA, OSCP, OSCE, GPEN, CEH, CCNA, CCNP.

Responsabilidades

• Define security configuration and operation standards for security systems, applications, and network appliances.
• Develop and validate baseline security configurations for OS, applications and devices.
• Perform vulnerability and technical control assessments and remediation.
• Carry out network and application penetration testing (black/grey/white box) and ethical hacking.
• Perform source code reviews and security configuration reviews.
• Define detailed security architecture and implement security mechanisms, standards and procedures.
• Perform log analysis, security monitoring and threat hunting.
• Configure and maintain IAM solutions (e.g. Delinea Secret Server).
• Support digital forensics and incident response, and review security documentation.

Conhecimentos

IT security experience

Vulnerability assessment

Penetration testing

Security monitoring

Incident response

ISO27001/NIST/SANS/OWASP knowledge

Networking protocols (TCP/IP)

IAM / Delinea Secret Server

Threat hunting

Forensic analysis

Security architecture

Formação académica

Master's degree or equivalent

Ferramentas

Delinea Secret Server

SIEM

Firewalls/IDS/IPS

PKI/Encryption

Descrição da oferta de emprego

Senior ICT Security Testing Specialist (Freelance)

Strasbourg, France | Mainly on-site

About the role

Our client is looking for a Senior ICT Security Testing Specialist to join them in Strasbourg on a 12-month freelance engagement. You will define and enforce security standards across systems and applications, run hands-on testing and audits, and support security monitoring and incident response.

Key responsibilities

• Define security configuration and operations standards for security systems, applications, network appliances and host-based security
• Develop and validate baseline security configurations for operating systems, applications and network/telecom equipment
• Perform internal and external vulnerability and technical control assessments, and recommend remediation
• Carry out network and application penetration testing (black, grey and white box) and ethical hacking
• Perform source code reviews and IT infrastructure/application security configuration reviews
• Define detailed security architecture, and design and implement technical security mechanisms, standards and procedures
• Perform log analysis, security monitoring and threat hunting
• Configure and maintain IAM solutions (e.g. Delinea Secret Server)
• Support digital forensics and incident response, and review security documentation

Requirements

• Master's degree or equivalent (minimum 4 years of higher education)
• 6+ years of professional experience in IT Security
• Advanced knowledge of ISO 27001, NIST, SANS Top 20 and OWASP
• Network and web application penetration testing, and vulnerability assessments
• Securing Unix/Linux and Windows systems, middleware and applications
• Strong grasp of TCP/IP, networking protocols and network analysis tools
• Forensic image collection and analysis
• Hands-on experience with:
• Firewalls, IDS/IPS, SIEM and IAM
• APT detection, DLP and PKI
• Endpoint and mobile security
• Encryption and remote access
• Patch management, and backup/disaster recovery
• Virtual environments and wireless security
• One or more of: CISSP-ISSAP, CISM, CISA, OSCP, OSCE, GPEN, CEH, CCNA, CCNP

Additional information

• EU nationality required due to confidential information access