Cyber Security Testing

Il y a 2 jours

Strasbourg, Grand Est, France Stott and May Consulting Temps plein
Senior ICT Security Testing Specialist (Freelance) Strasbourg, France | Mainly on-site

About the role
Our client is looking for a Senior ICT Security Testing Specialist to join them in Strasbourg on a 12-month freelance engagement. You will define and enforce security standards across systems and applications, run hands-on testing and audits, and support security monitoring and incident response.

Key responsibilities
• Define security configuration and operations standards for security systems, applications, network appliances and host-based security
• Develop and validate baseline security configurations for operating systems, applications and network/telecom equipment
• Perform internal and external vulnerability and technical control assessments, and recommend remediation
• Carry out network and application penetration testing (black, grey and white box) and ethical hacking
• Perform source code reviews and IT infrastructure/application security configuration reviews
• Define detailed security architecture, and design and implement technical security mechanisms, standards and procedures
• Perform log analysis, security monitoring and threat hunting
• Configure and maintain IAM solutions (e.g. Delinea Secret Server)
• Support digital forensics and incident response, and review security documentation Requirements
• Master's degree or equivalent (minimum 4 years of higher education)
• 6+ years of professional experience in IT Security
• Advanced knowledge of ISO 27001, NIST, SANS Top 20 and OWASP
• Network and web application penetration testing, and vulnerability assessments
• Securing Unix/Linux and Windows systems, middleware and applications
• Strong grasp of TCP/IP, networking protocols and network analysis tools
• Forensic image collection and analysis
• Hands-on experience with:
• Firewalls, IDS/IPS, SIEM and IAM
• APT detection, DLP and PKI
• Endpoint and mobile security
• Encryption and remote access
• Patch management, and backup/disaster recovery
• Virtual environments and wireless security
• One or more of: CISSP-ISSAP, CISM, CISA, OSCP, OSCE, GPEN, CEH, CCNA, CCNP Additional information
• EU nationality required due to confidential information access