IT Security Specialist Ajouter aux favoris
Task description:
- Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host- based security systems
- Develop and validate baseline security configurations for operating systems, applications, and networking and telecommunications equipment
- Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommend remedial action
- Perform source code reviews
- Perform network and application penetration testing ( Black box, Grey box and White box)
- Defining detailed security architecture
- Performing technical security audits
- Perform log analysis and security monitoring
- Perform IT infrastructure/ Application Security configuration reviews
- Design and implement technical security mechanisms and technologies
- Design and develop technical security standards and procedures
- Minimum 4 years of relevant education (master or equivalent) after the secondary school
- Minimum 6 years of relevant professional experience in IT Security
- Expected to possess advanced knowledge of/in:
- Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.)
- Good practice in the secure configuration of servers, network devices and applications
- Networking protocols and application communications
- Network analysis tools
- Securing Unix and Windows operating systems
- Securing middleware and applications.
- Network penetration testing
- Web application penetration testing
- Vulnerability assessments
- Forensic image collection and analysis
- Managing/deploying the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM - Security information and event management; IAM - Identity and access management; APT - Advanced Persistent threat detection; DLP - Data loss prevention; VA - Vulnerability Analysis and mitigation; PKI - Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services
- Open Web Application Security Protocol (OWASP) and secure software development standards
- Performing security code reviews.
- Security monitoring, threat detection and incident response;
- Proactively and iteratively searching through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);
- Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);
- Linux administration, TCP/IP, Network Security.
- Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.
- Expected to possess one or more of the following qualifications:
- Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP)
- Certified Information Security Manager (CISM)
- Certified Information Systems Auditor (CISA)
- OSCP, OSCE, GPEN, CEH, CCNA, CCNP
Emplois Recommandés
Assistant.e ingénieur.e gestionnaire des applications
À propos de nous L'INSA Strasbourg est un établissement public d'enseignement supérieur situé sur le campus de l'Esplanade. Il accueille environ 2 000 étudiants ingénieurs et architectes et emploie 27…
Alternance - Chargé de Communication et Evénementiel H/F - Bachelor CDC
Un organisme du secteur culturel, situé à proximité de Sélestat , en partenariat avec le CFA-IESA recrute un apprenti H/F Chargé de Communication et Evénementiel afin de préparer le Bachelor Respon…
Cuisinier H/F
Adaptel est une agence d'emploi spécialisée en Hôtellerie-Restauration. Que vous soyez, étudiants, professionnels ou en recherche d'extra, nous avons les missions qui correspondent à votre profil,…
Data Engineer - H/F
DESCRIPTION DU POSTE : LE VÔTRE ? Êtes-vous passionné(e) par les projets innovants ? Si vous avez de l’ingéniosité, de l’imagination et de la détermination, rejoignez-nous ! CONTEXTE Vous p…
French-Speaking Account Executive - Hybrid in Madrid
Ready to take ownership of the full sales cycle and grow your career with uncapped earning potential? We're looking for a native or bilingual French-speaking Account Executive to join a dynamic sales…
Senior DevOps Engineer (Strasbourg, on-site) - EU LISA
Senior DevOps Engineer (Strasbourg, on-site) – EU LISA Profile: Engineer. Minimum experience: 7 to 10 years. Knowledge: Devops, Git, ArgoCD, Kubernetes, Openshift, Kafka. Studies requ…
Chargé d'études électrique H/F
Présentation de l'entreprise : NEOCONCEPT VRD, fondée en 2012 est un bureau d’études spécialisé dans la détection et le géoréférencement de réseaux. En croissance permanente depuis sa création,…
Ouvrier électricien industriel (H/F)
Acteur majeur de l’emploi depuis près de 70 ans, Manpower est implanté au cœur des bassins d’emploi grâce à son réseau d’Agences et de Cabinets répartis dans toute la France. Notre histoire est celle…
Technicien support IT (H/F)
A propos de asap.work: Salut, nous c'est asap.work, l'agence d'intérim et cabinet de recrutement qui vient casser les codes et remettre l'humain au coeur de notre métier. Nous rejoindre c'est profite…
Chef.fe de chantier JUNIOR - Strasbourg F/H
Cardem , filiale de VINCI Construction (groupe Vinci), exerce son savoir-faire dans les travaux de curage , désamiantage et déconstruction grâce à la motivation et aux compétences de ses 600 s…