Cyber Security Analyst

pThis profile identifies a leader in the domain of operational and technical ICT Security who must have a strong ICT Security background, thorough knowledge and proven track record among a good mix of the competencies listed below: /p h3Protection measures /h3 ul liOperating systems and good practices for their configuration and protection; /li liEndpoint security systems including: antivirus software, host intrusion detection and prevention, vulnerability assessment, data encryption, honey-pot, hardening practices, data protection; /li liNetwork concepts and the associated security solutions. In particular: Internet/Intranet/Extranet architectures, authentication systems, Firewall, Proxies, Network IDS/IPS, PKI, e-mail gateways, IP security, Remote access control and violations; /li liIdentity and Access management; /li liData protection and integrity: encryption, data loss prevention mechanisms; /li liImplementing and managing technical security architectures, systems and software. /li /ul h3Security Assurance /h3 ul liAuditing and reviewing configuration of software, communication, computing systems and their architectures; /li liVulnerability scanning tools and techniques (e.g. Nmap, Nessus, Acunetix, Tripwire, Burp); /li liPenetration testing using various tools (including Kali, metasploit); /li liContinuous vulnerability follow-up and remediation, including establishing a constructive relationship with asset owners. /li /ul h3Security Monitoring /h3 ul liCyber-threat intelligence frameworks and tools (e.g. MISP, TAXII, STIX); /li liLogs collection, centralization and management; /li liDefining and implementing advanced systems in the domain of supervision of specific security elements and infrastructures (SIEM technologies); /li liMonitoring policy configuration (IDS rules, detection and correlation rules and scripts). /li liHandling complex incidents using incident management tools such as ticketing systems, wiki, knowledge base, reporting tools; /li liPerforming complex investigations of security events with the ability to keep a detailed track of the artefacts, actions, reports; /li liDrafting regular reports, both at technical and management levels; /li liAchieving complex technical analysis and investigations, involving memory, file system and forensic analyses; /li liPerforming suspicious files and malware analysis, using static and dynamic techniques and tools; /li liTake part to red/blue team exercises. /li /ul h3Nature of the tasks: /h3 pThis profile must have leadership, service and project management abilities, required flexibility to work on several tasks in parallel and be ready to perform and lead security investigations under short notice. /p pOn European Parliament’s specific demand, this profile could be required to work outside normal

working hours
or days. /p h3The main tasks required for this profile are: /h3 ul liProtect the Institution’s IT infrastructure and applications:ul liDesign and implement secured architectures; /li liDesign and implement Security settings on various kinds of IT components; /li liDevelop scripts and programs for a more efficient automation. /li /ul /li liRun the operational ICT Security processes:ul liOperate the corporate ICT Security solutions (e.g. endpoint protection suite, public key infrastructure, encryption solutions); /li liOperate the Security assurance platforms and tools; /li liPerform threat hunting activities (execute regular scripts, analyse results); /li liDetect, analyse Security events; /li liRespond to incidents and perform technical analysis tasks; /li liPerform all the required actions to re-establish as soon as possible the normal working conditions, liaise with internal and external stakeholders /li liBuild and improve the cyber-defence capabilities. /li /ul /li liSupport other ICT Security activities:ul liProvide technical support to Project owners for Security design; /li liProvide input for policies/standards/baselines writing; /li liPerform market analyses, set up labs/PoC for assessing and selecting appropriate technical solutions; /li liContribute to technical presentations and demos for user awareness /li /ul /li /ul pMaster. + At least one ICT Security professional certification is also required. /p h3Professional experience /h3 pAt least six years of professional relevant experience, including: /p ul lithree years’ operational and technical experience related to cyber-defence: deployment/operation of a SOC, CSIRT, Security assessment platform or technical Security infrastructure (PKI, endpoint...); and /li litwo years’ experience as a team leader or technical leader for major security-related projects. /li /ul pVery good knowledge of both written and oral English (proficient user
- C level, according to the Europass Language Passport classification) is mandatory. Good command of French is an asset. /p h3Other specific expertise /h3 pThe following additional administrative, technical and management competencies are r