IT security testing expert - English

Phoenix Technologies; Strasbourg; Presencial; EUR 80 000 - 110 000; Tempo integral

Resumo da oferta

Phoenix Technologies seeks an experienced IT Security professional to lead design, implementation, and ongoing improvement of security controls across our infrastructure and applications.

You will define security architecture, perform vulnerability assessments, conduct audits, and manage security technologies such as firewalls, SIEM, IAM, DLP, and PKI. Strong collaboration with development teams will be essential.

Qualificações

• Master’s degree or equivalent (minimum 4 years of post-secondary education).
• At least 10 years of professional experience in IT security.
• Strong knowledge of security frameworks (ISO27001, NIST, SANS, OWASP).
• Hands-on experience with SIEM, IAM, firewalls, and forensics.

Responsabilidades

• Define and enforce security architecture, configuration standards, and compliance policies.
• Perform vulnerability assessments, penetration testing (black-box, grey-box, and white-box) and code reviews.
• Conduct security audits, log analysis, threat hunting, and incident response.
• Design, deploy, and manage security tech like firewalls, IDS/IPS, SIEM, IAM, DLP, PKI.
• Develop and maintain security documentation, standards, and secure SDLC guidelines.
• Configure and maintain identity and access management solutions.

Conhecimentos

Security architecture

Vulnerability testing

Penetration testing

Threat hunting

Incident response

SIEM

IAM

Firewalls

Forensic analysis

Networking protocols

Formação académica

Master’s degree or equivalent

Ferramentas

Delinea Secret Server

Descrição da oferta de emprego

About the Role

We are seeking a skilled IT Security professional to join our team. You will lead the design, implementation, and continuous improvement of security controls across our infrastructure and applications.

Key responsibilities

• Define and enforce security architecture, configuration standards, and compliance policies for systems, networks, and applications.

• Perform vulnerability assessments, penetration testing (black-box, grey-box, and white-box) and source code reviews.

• Conduct technical security audits, log analysis, threat hunting, and incident response activities.

• Design, deploy, and manage security technologies such as firewalls, IDS/IPS, SIEM, IAM, DLP, and PKI.

• Develop and maintain security documentation, standards, and procedures, including secure software development guidelines.

• Configuration and maintenance of identity and access management solutions e.g. Delinea Secret Server

Required qualifications

• Master’s degree or equivalent (minimum 4 years of post-secondary education).

• At least 10 years of professional experience in IT security.

• Strong knowledge of security frameworks (ISO27001, NIST, SANS, OWASP) and secure configuration of servers, network devices, and applications.

• Hands-on experience with penetration testing, vulnerability assessments, SIEM, IAM, firewalls, and forensic analysis.

• Relevant certifications such as CISSP-ISSAP, CISM, CISA, OSCP, OSCE, GPEN, CEH, CCNA/CCNP.

• Forensic image collection and analysis

• Securing middleware and applications

• Networking protocols and application communications

Nice to have

• Experience with cloud security platforms and services.

• Background in threat intelligence and advanced persistent threat detection.