Cyber Risk Data Engineer

Il y a 2 jours

Hainaut, Wallonia, Belgique Wlgroup Temps plein
ppMost organisations can scan. Far fewer can say what the scans mean, who owns each finding and whether anything was fixed. A multinational defence organisation is looking for the analyst who closes that gap — half security assessment, half data engineering, and the coordination that turns a report into a repaired system. /ppstrongWhat you would be doing /strong /pulliReading the weekly assessment results, interpreting the technical findings, and writing the remediation plan that goes to the right technical owner. /liliJudging technical impact so that remediation is prioritised on risk rather than on volume, and advising on hardening at operating system, database and network level. /liliBuilding and running the data side: a structured repository that aggregates raw scan output from several sources, and the pipeline that ingests it without manual handling. /liliDesigning and maintaining live dashboards in Power BI or Grafana, and the metrics that make operational and management reporting meaningful. /liliActing as the technical contact for site administrators and system owners, and keeping the remediation tracking honest and current. /liliProducing the weekly and monthly reporting, and chairing the coordination meetings where roadblocks get cleared. /liliLeaving behind documentation good enough that the platform can be maintained without you. /li /ulpstrongWhat you would bring /strong /pulliSubstantial vulnerability management experience, current rather than historical, plus a track record of validating that delivered work meets its security requirements. /liliPractical familiarity with scanners and their output formats — Nessus, Qualys, OpenVAS. /liliA working grounding in security architecture: boundary protection, encryption, identity and access, monitoring and detection, incident response and risk. /liliReal SQL depth for modelling and querying large scan datasets, in PostgreSQL or SQL Server. /liliAdvanced Power BI, including data modelling and DAX, or the Grafana equivalent against SQL and time-series sources. /liliPython with Pandas or NumPy, or PowerShell, for parsing scan output and removing manual steps. /liliOwnership: the motivation to carry a task to its end, alone or in a team, and the writing to show for it. /liliNice to have: certifications such as CISSP, CISM or a GIAC, and a data or business intelligence certification such as PL-300. /li /ulpExtensions are offered where the work goes well. Applications are reviewed as they arrive. /p /p