Security Consultant/Analyst

My client currently requires a SC cleared Security Consultant/Analyst to join an existing team in Brussels.

JOB DESCRIPTION

- Define and submit security configuration and operations standards for security systems and applications, including policy assessment and compliance tools.
- Develop and propose baseline security configurations for operating systems, applications, networking and communications equipment.
- Define and propose detailed security architecture.
- Design and implement technical security mechanisms and technologies.
- Perform technical security audits.
- Perform log analysis and security monitoring using SIEM solutions
- Perform vulnerability scans and produce relevant report to Management
- Management of security incidents following existing formal procedures and best practice.
- Performing Proof of Concepts (PoC) for product evaluations.

ESSENTIAL EXPERIENCE:
3-6 years of Security Assurance in the public or private sector
Self motivated individual with flexible approach to work loads.
Good knowledge of Security standards and practices.
STRONG ENGLISH WRITTEN AND ORAL COMMUNICATION SKILLS.
WORKING KNOWLEDGE OF FRENCH
understanding of security processes and technologies including, threat
Analysis, vulnerability assessment, security monitoring and Compliance Auditing.

ADVANCED KNOWLEDGE

- Security Information and Events Management (SIEM) solutions
- Security best practice guidelines like ISO 27001, NIST, etc.
- Security risk management methods and tools like EAR/PILAR, CRAMM or EBIOS.
- Good practice in the secure configuration of Servers, network devices and applications.
- Networking protocols and application communications.
- Network analysis tools.
- Securing Linux and Windows operating systems.
- Securing Middleware and applications.
- Vulnerability assessments.
- Good knowledge of the following security technologies: Firewalls, intrusion detection and prevention systems, security information and event management, identity and access management, Advanced Persistent Threat detection, data loss prevention, vulnerability analysis and mitigation, Public Key Infrastructure, mobile security, communications and data encryption, remote access methods, backup and disaster recovery methodologies, wireless protocols and services.

QUALIFICATION

One or more of the following qualifications would be an advantage:

- Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP).
- Certified Information Security Manager (CISM).
- Certified Information Systems Auditor (CISA)