[6483] Security Testing Specialist
Il y a 2 jours
Strasbourg, Grand Est, France
GardPass Consulting & Space
Temps plein
60 000 € - 90 000 €/an
Gratuit avec email ou Google
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Gratuit avec email ou Google
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
Start date: Negotiable
EU Nationals Only
Location: Strasbourg, France 2-3 days Onsite
Tasks:
- Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances and hostbased security systems;
- Develop and validate baseline security configurations for operating systems, applications and networking and telecommunications equipment;
- Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls and recommend remedial action;
- Perform source code reviews;
- Perform network and application penetration testing (Black box, Grey box and White box);
- Define detailed security architecture;
- Perform technical security audits and ethical hacking;
- Perform log analysis and security monitoring;
- Perform IT infrastructure/ Application Security configuration reviews;
- Design and implement technical security mechanisms and technologies;
- Design and develop technical security standards and procedures;
- Configuration and maintenance of identity and access management solutions e.g. Delinea Secret Server
- Performing digital forensics and incident response actions; and reviewing security documentation
Mandatory Requirements:
- Minimum 4 years of relevant education (master or equivalent) after the secondary school.
- Minimum 6 years of relevant professional experience in IT Security.
- Experience with:
- Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.);
- Good practice in the secure configuration of servers, network devices and applications;
- Networking protocols and application communications;
- Network analysis tools;
- Securing Unix and Windows operating systems;
- Securing middleware and applications;
- Network penetration testing;
- Web application penetration testing;
- Vulnerability assessments;
- Forensic image collection and analysis;
- Manage/deploy the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services;
- Open Web Application Security Protocol (OWASP) and secure software development standards;
- Perform security code reviews;
- Security monitoring, threat detection and incident response;
- Proactively and iteratively search through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);
- Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);
- Linux administration, TCP/IP, Network Security;
- Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.