Freelance Senior Security Engineer (onsite)

Netcompany; Strasbourg; Sur place; EUR 120 000 - 160 000; Temps partiel

Résumé du poste

Netcompany in Strasbourg is seeking a Freelance Senior Security Engineer to design, implement, and maintain cybersecurity solutions across government and critical infrastructure. You will protect systems and data, integrate security controls, and contribute to risk assessments in a dynamic European context.

You will work onsite, collaborate with internal teams and external partners, develop automation, and produce documentation for audits and compliance to standards like ISO 27001 and NIS2.

Qualifications

• University Degree in Cybersecurity, Computer Science or related field and minimum 10 years of professional experience in cybersecurity.
• Expertise in security standards, frameworks and compliance (ISO 27001, NIS/NIS2, GDPR or similar public sector frameworks).
• Strong knowledge of security technologies and identity protocols (SSL/TLS, X.509, SAML, OAuth, OpenID Connect, JWT, AWS KMS, KMIP, PKCS#11 and HSMs).
• Cryptographic principles and algorithms: AES, GCM, PBKDF2, HMAC, SHA-2.
• Network security and architecture including next-gen firewalls and WAFs, TCP/IP, IPSec, HTTP/HTTPS, routing.
• Proficiency in Linux/Unix, system hardening and secure configuration.
• Experience with secure SDLC, programming/scripting, and automation in security contexts.
• Experience securing large-scale environments (data centres, government systems, cloud and hybrid).
• Strong English communication; French language knowledge is an advantage.

Responsabilités

• Design, implement, maintain and improve cybersecurity solutions protecting government systems and critical infrastructure.
• Integrate and securely configure security controls in line with policies, EU regulations and public sector standards.
• Monitor, evaluate and investigate security controls and events, including SIEM tooling (Splunk).
• Identify, analyze and remediate vulnerabilities and incidents, including patching and hardening.
• Ensure security across on-premise, cloud and hybrid environments with high availability.
• Enforce cybersecurity policies and controls aligned with GRC frameworks.
• Develop scripts, tools, and automation for monitoring, detection and response.
• Produce documentation, risk assessments and audit reports; communicate findings to stakeholders.
• Collaborate with internal teams and external providers; provide cybersecurity expertise and user support.

Connaissances

Security engineering

SDLC security

Automation

Cloud/hybrid security

English communication

French language advantage

Governance and compliance

Incident response

Security architecture

Formation

University degree in Cybersecurity or Computer Science

Outils

SSL/TLS

X.509

SAML

OAuth/OpenID Connect

JWT

AWS KMS

HSMs

TLS cryptography (AES, GCM)

Web application firewalls (Fortigate/Imperva)

Splunk

Linux/Unix

Description du poste

Freelance Senior Security Engineer (onsite)

• Contract

Are you ready to shape the future technological landscape in Europe?
We are dedicated to responsible digitalisation, building innovative, inclusive solutions that drive meaningful impact. With over 8,900 professionals across Europe, we help EU institutions, public and private organisations thrive in a rapidly evolving digital world. Are you ready to shape the future through technology? Your journey starts here. Take a look at some of our impactful projects here: https://netcompany.com/cases/

So, what are the main responsibilities of anSenior Security Engineerin Netcompany?

The Senior Security Engineer is responsible for designing, implementing, and maintaining cybersecurity solutions to protect the organization’s systems, infrastructure, and data.

As aSenior Security Engineer, you will:

• Design, implement, maintain, and continuously improve cybersecurity solutions protecting government systems and critical infrastructure using modern security technology stacks.
• Integrate and securely configure security controls in line with organizational policies, EU regulations, and public sector standards.
• Monitor, evaluate, and investigate security controls and events, including security event analysis and SIEM tooling (e.g., Splunk investigations).
• Identify, analyze, and remediate vulnerabilities and incidents, including patching, system hardening, and certificate and cryptographic asset management.
• Ensure the security and resilience of systems across on-premise, cloud, and hybrid environments, including high-availability infrastructures.
• Implement and enforce cybersecurity policies, procedures, and controls aligned with governance, risk, and compliance (GRC) frameworks.
• Develop scripts, tools, and automation to enhance security monitoring, detection, and response capabilities.
• Produce technical documentation, risk assessments, and audit reports; communicate findings to stakeholders and management.
• Collaborate with internal teams, external providers, and public sector bodies; provide cybersecurity expertise and user support.

What would make you a fit for the role:

• University Degree in Cybersecurity, Computer Science or related field and minimum 10 years of professional experience in cybersecurity, information security, or secure systems engineering within complex environments.
• Proven expertise in security standards, frameworks, and compliance requirements (e.g., ISO 27001, NIS/NIS2, GDPR, or similar public sector frameworks).
• Strong knowledge of security technologies and identity protocols: SSL/TLS, X.509, SAML, OAuth, OpenID Connect, JWT, AWS KMS, KMIP, PKCS#11,including digital certificates and hardware security modules (HSMs).
• Solid understanding of cryptographic principles and algorithms: AES, GCM, PBKDF2, HMAC, SHA-2.
• Advanced knowledge of network security and architecture includingnext-generation firewalls and web application firewalls (e.g., Fortigate, Imperva),TCP/IP, IPSec, HTTP/HTTPS, routing, firewalls, routers, and switches.
• Proficiency in Linux/Unix systems, system hardening, operating system security, and secure configuration practices.
• Experience with secure software development lifecycle (SDLC), programming/scripting, and automation in security contexts.
• Experience securing large-scale, complex environments (e.g., data centres, government systems, cloud and hybrid infrastructures).
• Strong communication skills in English, knowledge of French is an advantage.

If you are looking forward to be part of a diverse environment, and have the opportunity to work alongside well-experienced professionals, on challenging, large-scale projects that directly impact millions of citizens around the globe, then this is the place to be!

#LI-SS2

We ensure equal opportunities, treatment, and consideration to all candidates. Discrimination based on sex, racial or ethnic origin, religion or belief, disability, age, sexual orientation or marital status, physical or mental disability, or any other factor protected by applicable laws and regulations is prohibited. As part of the Netcompany culture, we respect human rights and focus on creating a positive workplace, where all employees are valued, and where diversity and inclusion are a vital part of our everyday working experience.