Network Security Engineer (F/M)

ESSP SAS; Toulouse; Sur place; EUR 50 000 - 80 000; Plein temps

Résumé du poste

ESSP SAS in Toulouse seeks a Network Security Engineer to own network security assets and provide technical expertise to ESSP teams. The role emphasizes security event analysis, vulnerability remediation, and deployment of security subsystems.

You will interface with Security and Network teams, support audits and pen tests, and contribute to the evolution of monitoring and tooling. English proficiency (minimum B2) is required; occasional travel in Europe is possible.

Qualifications

• Engineering degree in Telecom Engineering, Cybersecurity or equivalent.

Responsabilités

• Analyse network security events and alert the security team.

Connaissances

Cyphering & authentication

Security concepts

OSI model knowledge

Network security

Rigour

Initiative and synthesis

Team player

Keen on automation

Formation

Engineering degree in Telecom Engineering or Cybersecurity

Outils

GitLab

ELK Stack

Wireshark

TShark

HP OpenView

Cisco CLI

MSOffice

MSProject

Description du poste

We are looking for a Network Security Engineer who will be in charge of Network security related assets and functions, who will provide technical expertise to ESSP Teams.

For these activities, we are looking for someone with at least 3 years' experience in IT Security, with a very good level of English (minimum B2).

Your main responsibilities/activities will be:

The technical expertise related to the security subsystems and function of the Network:

• Analysing events related to the Network security functions or subsystems. In case of suspicion of security event, the security team is alerted,
• Ensure the level 2 of maintenance, raise and analyse the "Observations Reports" for the security subsystems,
• Support the production of operational procedures to maintain and operate the security subsystems,
• Ensure the deployment of the new version of the security subsystems,

Interfacing with the Security team for all topics related to Network security:

• Analyse/Manage vulnerabilities detected by the Security team. Interact with Security team and the network service provider to define and implement a remediation plan to tackle critical vulnerabilities,
• Ensure the security requirements deployment for the internal activities of the Network team as well as in the operational and maintenance baselines,
• Analyse and deploy the Product Security Requirements for the applicable tools,
• Analyse and provide the data that will feed the SIEM and the asset management tool (tools managed by Security team). The data provisioning can be done through a dedicated tool. You will be in charge of the maintenance and the evolutions of the data provisioning tool in line with Security and Network requirements,
• Support Security for the audit (internal and external), the penetration test (prepare the test platform) and the risk analysis.

The maintenance of the tools used by the network team (as back-up):

• Ensure the administration tasks of the Network monitoring processing chain: configuration updates, configuration management, user management, incidents investigation,
• Ensure the administration tasks of the remote sites monitoring processing chain: configuration updates, configuration management, user management, incidents investigation,
• Inventory and document the tools used by the Network team for technical investigation and monitoring,
• Ensure the interface with ESSP team in order to maintain the test platform network and to manage hardware and software configurations,
• Execute some of the functional tests on the test platform (ex: reproduction of network problems).

The evolution of the existing tools and the development of new ones (as backup):

• Ensure the evolutions of existing tools, such as the real-time data processing, the integration of new releases,
• In coordination with Product Assurance requirements, ensure the qualification of those evolutions and new tools: design document updates, production of test procedures and test reports, scheduling and animation of key-points,
• Update the test environment network for different needs: evolutions of the ground segment, specific technical investigation, requests coming from the Security team,

PROFILE:

• Good knowledge of cyphering and authentication methods
• Good knowledge of security equipment/methods: IDS, IPS, Firewall, SIEM, IPSec, PKI
• Good knowledge of ELK (Elastic Logstach, Kibana)
• Configuration management tool: GitLab
• General knowledge of each layer of the OSI model (Open Systems Interconnection)
• General knowledge in network security (IP/port filtering, firewall ASA, Diode, IDS, IPS, SIEM)
• Good knowledge of the following protocols: Ethernet, IP, TCP, UDP, SNMP, FTP SFTP, SSH
• Knowledge of Switch/Routers/Firewalls Cisco CLI environment (Command Line Interface)
• Network tools: Wireshark, TShark, HP OpenView
• Rigour
• Strong autonomy
• Initiative and synthesis spirit
• Capability to assume responsibilities
• Team player spirit
• Skills in Microsoft software suites (MSOffice, MSProject, etc.)

JOB SPECIFICATION :

Engineering degree in Telecom Engineering, Cybersecurity or equivalent

Available for punctual travels mainly in Europe

Subject to constraints of minimum presence during normal vacation periods (July/August, Christmas, February, Easter).