Cyber Security Analyst

This profile identifies a leader in the domain of operational and technical ICT Security who must have a strong ICT Security background, thorough knowledge and proven track record among a good mix of the competencies listed below:

Protection measures

• Operating systems and good practices for their configuration and protection;
• Endpoint security systems including: antivirus software, host intrusion detection and prevention, vulnerability assessment, data encryption, honey-pot, hardening practices, data protection;
• Network concepts and the associated security solutions. In particular: Internet/Intranet/Extranet architectures, authentication systems, Firewall, Proxies, Network IDS/IPS, PKI, e-mail gateways, IP security, Remote access control and violations;
• Identity and Access management;
• Data protection and integrity: encryption, data loss prevention mechanisms;
• Implementing and managing technical security architectures, systems and software.

Security Assurance

• Auditing and reviewing configuration of software, communication, computing systems and their architectures;
• Vulnerability scanning tools and techniques (e.g. Nmap, Nessus, Acunetix, Tripwire, Burp);
• Penetration testing using various tools (including Kali, metasploit);
• Continuous vulnerability follow-up and remediation, including establishing a constructive relationship with asset owners.

Security Monitoring

• Cyber-threat intelligence frameworks and tools (e.g. MISP, TAXII, STIX);
• Logs collection, centralization and management;
• Defining and implementing advanced systems in the domain of supervision of specific security elements and infrastructures (SIEM technologies);
• Monitoring policy configuration (IDS rules, detection and correlation rules and scripts).
• Handling complex incidents using incident management tools such as ticketing systems, wiki, knowledge base, reporting tools;
• Performing complex investigations of security events with the ability to keep a detailed track of the artefacts, actions, reports;
• Drafting regular reports, both at technical and management levels;
• Achieving complex technical analysis and investigations, involving memory, file system and forensic analyses;
• Performing suspicious files and malware analysis, using static and dynamic techniques and tools;
• Take part to red/blue team exercises.

Nature of the tasks:

This profile must have leadership, service and project management abilities, required flexibility to work on several tasks in parallel and be ready to perform and lead security investigations under short notice.

On European Parliament’s specific demand, this profile could be required to work outside normal working hours or days.

The main tasks required for this profile are:

• Protect the Institution’s IT infrastructure and applications:
  • Design and implement secured architectures;
  • Design and implement Security settings on various kinds of IT components;
  • Develop scripts and programs for a more efficient automation.
• Run the operational ICT Security processes:
  • Operate the corporate ICT Security solutions (e.g. endpoint protection suite, public key infrastructure, encryption solutions);
  • Operate the Security assurance platforms and tools;
  • Perform threat hunting activities (execute regular scripts, analyse results);
  • Detect, analyse Security events;
  • Respond to incidents and perform technical analysis tasks;
  • Perform all the required actions to re-establish as soon as possible the normal working conditions, liaise with internal and external stakeholders
  • Build and improve the cyber-defence capabilities.
• Support other ICT Security activities:
  • Provide technical support to Project owners for Security design;
  • Provide input for policies/standards/baselines writing;
  • Perform market analyses, set up labs/PoC for assessing and selecting appropriate technical solutions;
  • Contribute to technical presentations and demos for user awareness

Master. + At least one ICT Security professional certification is also required.

Professional experience

At least six years of professional relevant experience, including:

• three years’ operational and technical experience related to cyber-defence: deployment/operation of a SOC, CSIRT, Security assessment platform or technical Security infrastructure (PKI, endpoint...); and
• two years’ experience as a team leader or technical leader for major security-related projects.

Very good knowledge of both written and oral English (proficient user - C level, according to the Europass Language Passport classific