Cyber Vulnerability and Penetration Consultant

ph3bJob Description: /b /h3 /brpYou will be aggregating, transforming, analysing, interpreting or enriching cyber threat information in order to provide the necessary context for decision‑making processes; /p /brpDeveloping and disseminating impactful Cyber Threat Information (CTI) in the face of millions of indicators and alerts and delivering actionable cyber threat information to the client's senior management and the Cybersecurity Operations Centre (SOC). /p /brul /brliDesign the basics of a Threat-informed defence (TID) against vulnerabilities to threats /li /brliDesign and implement the use of MITRE ATTCK to Map and Track Adversary TTPs /li /brliDesign and implement steps to aligning the CTI with SOC and IR. /li /brliContribute to achieving early warning for cyber resilience with an actionable CTI. /li /brliPlanning of coordination, training and awareness activities related to the Cyber Threat Landscape (CTL); /li /brliProposal of practical solutions to improve the procedures and tools supporting the CTL activities. /li /brliSupport the Unit with updating core documents, which may include: /li /brliPreparation and maintenance of Monthly and quarterly Cyber Threat Reports /li /br /ul /brh3bRequirements /b /h3 /brul /brliWhat do you need to succeed in this position? /li /brliA Masters degree and at least one ICT Security professional certification is also required. /li /brliIn-depth knowledge of methodologies, processes, tools and frameworks on cybersecurity, including the emerging threats /li /brli6 years of professional relevant experience, including: /li /brliOperational and technical experience related to cyber-defence deployment/operation of a SOC, CSIRT, Security assessment platform or technical Security infrastructure (PKI, endpoint...); and /li /brliExperience as a team leader or technical leader for major security-related projects in the Cyber Threat Landscape area. /li /brliProven experience with managing internal and external stakeholders in order to collect the relevant information on emerging cyber threat /li /brliExperience with vulnerability scanning tools and techniques (e.g. Nmap, Nessus, Acunetix, Tripwire, Burp) /li /brliWith penetration testing using various tools (including Kali, metasploit) /li /brliGood knowledge of Enterprise Risk Management, Cybersecurity Cyberthreat Intelligence frameworks and tools: (MISP, TAXII, STIX) /li /brliGood understanding of SIEM methodologies /li /brliGood communication skills, ability to lead multi‑lingual meetings and to do presentations to managers, technical staff and also end-users in the context of user awareness activities /li /brliLeadership, autonomy and commitment to increasing maturity /li /brliA fluency in the English language (both oral and written) is expected. French is an asset /li /br /ul /brh3bOur offer: /b /h3 /brpA particularly attractive salary package, with many additional benefits, to attract the best of you. A professional and stimulating work environment in the field of telecommunications. Multiple career opportunities within a changing group, advanced training in new technologies, rich and recognized expertise. Your application will be treated with confidentiality. We would be very happy to organize a first appointment to talk to you about this opportunity and consider your next career development. /p /p