Cyber Security Engineer

Cyber security system engineer

General description:
The "Cyber security system engineer" is part of the IT/Cyber Security team accountable for the engineering and operational support of the related applications and services to secure the Client telecom and IT networks.
As an "Cyber security system engineer" you will be responsible for:
-the engineering activities of a subset of Client IT/Cyber Security applications used to prevent and detect cyber security breaches related to the Client IT and telecom networks.
-the engineering activities related to automation and application/system monitoring and integration to Client SIEM for security monitoring

Job Content:
Security engineering
-Performing the integration of security solutions in the different environments with the support of the vendor, engineer and operational team.
-Participating to the testing/validation of the solution (resolution of technical issues discovered during testing, participation/support the 'non-functional requirements' validation).

Automation & application/system monitoring engineering
-Participating to the assessment and implementation of the possible automation solutions to ease system integration and self-repair processes.
-Assessing/performing the required monitoring (Groundwork) configuration to ensure an efficient application and system monitoring.
-Provide support to the application engineers for application integrations and automation.

Security monitoring engineering
-Participating to the assessment and implementation of the solutions to enable data integration into Client SIEM (Hp ArcSight).

Roadmap/life cycle
-Participate to the technical roadmap/capacity planning/patching strategy of solutions with the collaboration of the vendor, domain architect, application engineers and operational team.

Support to "Operations team"
-Providing support to the operational team in case of major incident or planned intervention when required (including outside business hours in best effort mode)

Competences:
*Open, pragmatic and results-oriented
*good verbal and written communication skills (English mandatory)
*good analytical skills (solving incidents, analysing problems and new requirements)
*able to work autonomously
*excellent team worker with ability to delegate/share knowledge
*positive and creative
Required skills/experience:
*At least bachelor in computer sciences or equivalent by experience
*Between 1 and 3 years of experience with IT application support (engineering or operations)
*Strong interest in IT/Cyber security threads and risks
*Knowledge/experience with the technologies/applications mentioned below:
Mandatory:
-network element/fault element manager (Nagios, groundwork)
-regular expressions and data manipulation, Scripting language (Bash, Perl, Python, Salt ) and SQL
-networking, routing protocols, Firewalls
-operating systems (Linux and Windows) and databases administration
-intrusion prevention/detection (such like Snort, Suricata, Sourcefire)

Strong added value:
-security information and event management (preference for HP Arcsight)
-endpoint monitoring/forensics, netflow monitoring, network anomaly detection, packet capture and analysis (such like Lancope StealthWatch)
-security big data analytics
-security netflow analysis solution (CISCO lancope as example)
-sandboxing