Senior ICT Security Testing Specialist

Unisys; Strasbourg; On-site; EUR 41,000 - 53,000; Full time

Job summary

Unisys in Strasbourg is seeking a Senior ICT Security Testing Specialist to help protect and strengthen large-scale IT systems. You will perform vulnerability assessments, penetration tests (black, grey, white box) and source code reviews, define secure baselines, support security monitoring, and contribute to security mechanisms.

The role requires at least 6 years in IT security within complex environments, a master’s degree or equivalent, and certifications such as CISSP-ISSAP or CISM are

Qualifications

• Master's degree or equivalent after secondary school
• 6+ years of hands-on IT security experience
• CISSP-ISSAP or CISM is a plus

Responsibilities

• Define security configuration and operations standards for security systems and applications.
• Develop and validate baseline security configurations for operating systems, applications and equipment.
• Perform internal and external security control assessments and vulnerability assessments.
• Conduct network and application penetration testing (Black, Grey and White box).
• Define detailed security architecture and perform security audits and ethical hacking.
• Perform log analysis and security monitoring; review security documentation.

Skills

Security best practices

Vulnerability assessments

Penetration testing

Security monitoring

Incident response

Security code reviews

Network analysis tools

Unix/Windows hardening

Education

Master's degree or equivalent

Tools

Delinea Secret Server

SIEM

Job description

Our client is a leading European agency at the forefront of managing and developing large-scale IT systems that support security, border management, migration, and law enforcement cooperation across Europe. Working in a highly international environment, you will contribute to the delivery and continuous improvement of critical digital services that enable cooperation between European countries and institutions.

This is an opportunity to work on complex, business-critical services within a dynamic environment where operational excellence, innovation, and service quality are key priorities.

Role Overview

We are looking for an experienced Senior ICT Security Testing Specialist to help protect and strengthen large-scale IT systems and services. The successful candidate will play a key role in assessing the effectiveness of existing security controls, performing vulnerability assessments, penetration tests (black, grey and white box) and source code reviews, and recommending remedial action. You will also define secure configuration baselines and security standards, support security monitoring and incident response, and contribute to the design and implementation of technical security mechanisms.

The role requires a technically strong security professional with solid analytical, communication, and problem-solving capabilities, combined with at least 6 years of hands‑on experience in IT security within complex environments. A master’s degree or equivalent is expected, and one or more recognised certifications such as CISSP‑ISSAP or CISM are an advantage.

Contract type: Freelancer agreement, with an initial contract duration and the possibility for renewal.

• Compensation: daily rate offer of 255 euros.

Workplace type: On‑site from the office of the institution in Strasbourg

Responsibilities

• Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances and hostbased security systems;
• Develop and validate baseline security configurations for operating systems, applications and networking and telecommunications equipment;
• Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls and recommend remedial action;
• Perform network and application penetration testing (Black box, Grey box and White box);
• Define detailed security architecture;
• Perform technical security audits and ethical hacking;
• Perform log analysis and security monitoring;
• Perform IT infrastructure/ Application Security configuration reviews;
• Design and implement technical security mechanisms and technologies;
• Design and develop technical security standards and procedures;
• Configuration and maintenance of identity and access management solutions e.g. Delinea Secret Server
• Performing digital forensics and incident response actions; and reviewing security documentation

Education Requirements

Minimum 4 years of relevant education (master or equivalent) after the secondary school.

Experience Requirements

Minimum 6 years of relevant professional experience in IT Security. Qualifications,

Knowledge and Skills Expected to possess advanced knowledge of:

• Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.);
• Good practice in the secure configuration of servers, network devices and applications;
• Networking protocols and application communications;
• Network analysis tools;
• Securing Unix and Windows operating systems;
• Securing middleware and applications;
• Network penetration testing;
• Vulnerability assessments;
• Forensic image collection and analysis;
• Manage/deploy the following security technologies:
• IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management;
• IAM – Identity and access management;
• APT – Advanced Persistent threat detection;
• DLP – Data loss prevention;
• VA – Vulnerability Analysis and mitigation;
• Mobile security;
• Communications and data encryption ;
• Backup and disaster recovery methodologies;
• Patch management technologies and processes;
• Wireless protocols and services;
• Open Web Application Security Protocol (OWASP) and secure software development standards;
• Perform security code reviews;
• Security monitoring, threat detection and incident response;
• Proactively and iteratively search through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);
• Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);
• Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.;

Expected to possess one or more of the following qualifications:

• Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP);
• Certified Information Security Manager (CISM);

Security Requirement: The applicant must be able to obtain a personnel security clearance at EU SECRET level (SECRET UE/EU SECRET) after the selection process.