Senior ICT Security Testing Specialist

TELEKOM HELLENIC BUSINESS SOLUTIONS SA; Strasbourg; On-site; EUR 70,000 - 100,000; Full time

Job summary

Telekom HBS, part of the Telekom Group, is an ICT Systems Integrator delivering Cloud, Data Centre, Networking, Cybersecurity, BI, and more. We seek a Senior ICT Security Testing Specialist to define security configurations, perform vulnerability assessments, code reviews, and penetration testing across networks and applications.

The role covers security architecture design, security audits, incident response actions, and ongoing security monitoring and IAM reviews to strengthen organizational

Qualifications

• Minimum 4 years of relevant education after secondary school (master or equivalent).
• Minimum 6 years of professional experience in IT Security.
• Experience with security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP).
• Proven ability in secure configuration of servers, network devices, and applications.

Responsibilities

• Define security configurations and operations standards for security systems and applications.
• Perform internal and external security assessments and vulnerability testing.
• Conduct security code reviews and penetration testing (black, grey, and white box).
• Design security architectures and oversee IT security audits and incident response actions.
• Monitor security operations, perform log analysis, and review IAM configurations.

Skills

Security assessment

Penetration testing

Vulnerability management

Secure code reviews

Network security

Education

Master's degree or equivalent

Tools

Firewalls

IDS/IPS

SIEM

IAM

DLP

PKI

OWASP

Job description

Telekom HBS, part of the Telekom Group, is an ICT Systems Integrator offering a comprehensive suite of ICT Solutions and Services.

Telekom HBS, specializes in delivering ICT Services in areas such as Cloud, Data Centre operations, Networking, Cybersecurity, BI and Data Warehouse, Big Data, Service Desk, Proactive Monitoring, Operations and Support, Service Management, Project and Programme Management, and Professional Services. We are seeking a Senior ICT Security Testing Specialist to join our team and be responsible for the following tasks:

• Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances and hostbased security systems;
• Develop and validate baseline security configurations for operating systems, applications and networking and telecommunications equipment;
• Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls and recommend remedial action;
• Perform source code reviews;
• Perform network and application penetration testing (Black box, Grey box and White box);
• Define detailed security architecture;
• Perform technical security audits and ethical hacking;
• Perform log analysis and security monitoring;
• Perform IT infrastructure/ Application Security configuration reviews;
• Design and implement technical security mechanisms and technologies;
• Design and develop technical security standards and procedures;
• Configuration and maintenance of identity and access management solutions e.g. Delinea Secret Server Performing digital forensics and incident response actions; and reviewing security documentation

• Minimum 4 years of relevant education (master or equivalent) after the secondary school.
• Minimum 6 years of relevant professional experience in IT Security.
• Experience with:
  • Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.);
  • Good practice in the secure configuration of servers, network devices and applications;
  • Networking protocols and application communications;
  • Network analysis tools;
  • Securing Unix and Windows operating systems;
  • Securing middleware and applications;
  • Network penetration testing;
  • Web application penetration testing;
  • Vulnerability assessments;
  • Forensic image collection and analysis;
  • Manage/deploy the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services;
  • Open Web Application Security Protocol (OWASP) and secure software development standards;
  • Perform security code reviews;
  • Security monitoring, threat detection and incident response;
  • Proactively and iteratively search through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);
  • Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);
  • Linux administration, TCP/IP, Network Security;
  • Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.
• One of the following Certifications:
  • Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration
  • (CISSP-ISSAP);
  • Certified Information Security Manager (CISM);
  • Certified Information Systems Auditor (CISA);
  • OSCP, OSCE, GPEN, CEH, CCNA, CCNP.