Cloud Native Security Engineer

Il y a 3 semaines

Bruxelles, Belgique Tech Recruitment Temps plein

- Installation, configuration, maintenance and upgrades of cyber security solutions and components, with a specific focus on cloud native technologies (containers based on Docker/Kubernetes, etc.)

- Monitor managed components and manage incidents and problems

- Perform day-to-day system management with regards to cloud native security components, on premises as well as on public cloud deployments (AWS and Azure Cloud)

- Harden system and network components

- Develop, maintain and roll-out reference  configurations 

- Implement and follow security policies

- Develop   and   maintain   system   inventory/CMDB, system   documentation, operating procedures for all the work performed

- Report on service performances and availability, produce dashboards

- Design, develop, install, configure, test, monitor, maintain, troubleshoot and upgrade cyber security infrastructure with a specific focus on cloud native technologies (containers based on Docker/Kubernetes, etc.)

- Provide expertise, guidance, recommendations and documented security configurations for implementation of security tools and processes

- Produce detailed engineering specifications

- Evaluate and recommend secure configurations

- Identify   security   requirements,   based   upon   need   or   translate   high-level   security requirements into detailed technical requirements

- Support various technical and non-technical stakeholders to specify and negotiate security requirements

- Interact  with  network  and  system  engineering  teams  to  effectively  communicate  and develop security solutions

-Draft documentation and standard operational procedures to support security systems operations

- Ensure the technical design and contributes to implementation of new components and/or enhancements in coordination with other team members in particular project managers, security architects and engineers.

- Support data integrity assurance work is completed through appropriate back-ups methods to ensure RTO are met

- Support security monitoring use-case engineering

- Security events collection technical design. Integration of log sources into a SIEM solution.

- Elaboration and translation of the security monitoring policy into monitoring rules

- Investigate, diagnose and solve system related problems with regards to security services and infrastructure, on-premises as well as on public cloud deployments

- Diagnose  and  solve  problems  and  faults  occurring  in  the  operation  of  cyber  security components

- Comply with organization procedures to ensure integrity of the system

- Recommend resolutions and improvements

- Provide consolidate findings on components or processes

- Document cyber defence components configurations

- Ensure  that  communication  performance,  recovery,  and  security  needs  meet  agreed service agreement standards

- Contribute to define network design policies, philosophies and criteria

- Craft,  fine-tune  and  validate  low  level  intrusion  detection  rules  for  network  and  host protection

- Development, test and roll-out new releases of Identity and Access Management solutions according to Europol’s standards



Requirements

Mandatory: 
- More than 6 years of experience in security and system engineering

- A minimum of 2 years of experience in network and system security administration

- A minimum of 2 years of experience in Kubernetes/cloud native security engineering

- Good knowledge of authentication, authorization and accounting (IAM, Federation, RBAC, service accounts) for on-premises and public cloud deployments

- Good knowledge of container security for on-premises and public cloud deployments

- Good knowledge of administration and task automation using scripting and/or programming languages (e.g. Python, PowerShell, Perl, Java) for on-premises and public cloud deployments


Desirable: 
- A minimum of 2 years of experience in Kubernetes/cloud native security testing

- Good knowledge of Network Protocols for on-premises and public cloud deployments


- Good knowledge of Security protocols for on-premises and public cloud deployments


- Good knowledge of Cryptographic solutions for on-premises and public cloud deployments


- Good knowledge of auditing systems and networks for configuration weaknesses and vulnerabilities for on-premises and public cloud deployments

 
- Good knowledge of hardening/Securing   of   Unix-like   systems, logging/detection, and general systems design for on-premises and public cloud deployments


- Good knowledge of security monitoring and automated response for on-premises and public cloud deployments


- Good knowledge of enterprise Active Directory and GPO development for on-premises and public cloud deployments


- Certification: Certified Kubernetes Security Specialist, Azure Security Engineer Associate (AZ-500), GSEC (GIAC Certified Security Essentials), GCUX (GIAC Certified UNIX Security Administrator), Linux Foundation Certified System Administrator (LFCS), CCSP, CCSK or similar