Senior IT Security Engineer - Pen Testing & SecurityOps

MEERAB Group; Bourgogne-Franche-Comté; Presencial; EUR 70 000 - 90 000; Tempo integral

Resumo da oferta

MEERAB Group is seeking an IT Security Engineer to define security configurations, perform assessments, and drive remediation across systems and applications. The role emphasizes security testing, code reviews, and security architecture.

You will conduct penetration testing (web and network), perform log analysis, and implement security controls. A strong background in ISO/NIST frameworks and incident response is required.

Qualificações

• Post-secondary education with a security focus; 6+ years of IT security experience preferred.
• Strong grasp of security control baselines and secure configuration practices.
• Experience with security testing (code reviews, pen tests) and incident response.

Responsabilidades

• Define security configurations and operations standards for systems and apps.
• Conduct vulnerability assessments and advise remediation actions.
• Perform internal and external security testing incl. web and network assessments.
• Review source code for security issues and perform security audits.
• Analyze logs and monitor security events to detect threats.
• Develop security architectures and deploy security controls across infrastructure.

Conhecimentos

Security frameworks

ISO 27001/NIST/SANS OWASP

Vulnerability assessments

Penetration testing

Unix/Linux security

Windows security

Network security

Threat hunting

Formação académica

Master's degree in IT/Security

Ferramentas

SIEM

Firewalls

IDS/IPS

DLP

PKI

Forensic tools

Descrição da oferta de emprego

MEERAB Group is seeking an IT Security Engineer to define security configurations, perform assessments, and drive remediation across systems and applications. The role emphasizes security testing, code reviews, and security architecture.

You will conduct penetration testing (web and network), perform log analysis, and implement security controls. A strong background in ISO/NIST frameworks and incident response is required.