Security Systems Engineer - Contract - Belgium - Windows/Perl

My client is seeking a Cyber Security Senior System Engineer for a 6 month rolling contract in Brussels.

GENERAL DESCRIPTION:

The "Cyber security system engineer" is part of the IT/Cyber Security team accountable for the engineering and operational support of the related applications and services.

As an "Cyber Security Senior System Engineer" you will be responsible for:

- The engineering activities related to automation, application/system monitoring and integration to our client's SIEM for security monitoring
- The engineering activities of a subset of our client's IT/Cyber Security applications used to prevent and detect cyber security breaches related to the IT and telecom networks.

JOB CONTENT:

Automation & application/system monitoring engineering

- Participating to the assessment and implementation of the possible automation solutions to ease system integration and self-repair processes.
- Assessing/performing the required monitoring (Groundwork) configuration to ensure an efficient application and system monitoring.
- Provide support to the application engineers for application integrations and automation.
- Produce and keep up to date technical and operational documentation of the solutions

Security monitoring engineering

- Participating to the assessment and implementation of the solutions to enable data integration into our client's SIEM (Hp ArcSight).

Security engineering

- Performing the integration of security solutions in the different environments with the support of the vendor, engineer and operational team.
- Participating to the testing/validation of the solution (resolution of technical issues discovered during testing, participation/support the 'non-functional requirements' validation).

Support to "Operations team"

- Providing support to the operational team in case of major incident or planned intervention when required (including outside business hours in best effort mode)

Roadmap/life cycle

- Participate to the technical roadmap/capacity planning/patching strategy of solutions with the collaboration of the vendor, domain architect, application engineers and operational team.

COMPETENCES:

Open, pragmatic and results-oriented

Good verbal and written communication skills (English mandatory)

Good analytical skills (solving incidents, analysing problems and new requirements)

Able to work autonomously. Creative

Excellent team worker with ability to delegate/share knowledge

REQUIRED SKILLS/EXPERIENCE:

At least bachelor/Master in computer sciences or equivalent by experience

Between 5 and 10 years of experience with IT application support (engineering or operations)

Strong interest in IT/Cyber security threads and risks

Technical knowledge/experience as mentioned beloe:

Mandatory:

- Knowledge and experience to setup and configure OS, application, network component monitoring (logs, SMNP traps, ) based on network element/fault element manager such like Nagios, groundwork (preference) including graphical representations for service monitoring (Grafana as example).
- Knowledge and experience to create 'complex' regular expressions and data manipulation based on:
- Scripting language (Bash, Perl, Python )
- SQL queries
- Knowledge and experience with implementation/configuration of "configuration management" solutions to ease massive deployment (with specific configuration per server) and to ensure automated heath repair process based on products such like SaltStack (as preference), Puppet, Chef
- General knowledge of Linux and Windows operating systems and databases administration
- Good general knowledge of the networking, routing protocols, Firewalls in order to understand, align with the dedicated network teams.

Strong added value:

- Knowledge and experience with setup/configuration of intrusion prevention/detection solutions such like Snort, Suricata, Sourcefire,
- Knowledge and experience of integration with security information and event management (preference for HP Arcsight)
- General (an higher knowledge is a plus) knowledge on security applications (setup/configuration/

integration within network and with SIEM):

- endpoint monitoring/forensics
- security netflow analysis solution (Lancope StealthWatch as example)
- security big data analytics (SOLR, Kafka, Hadoop platform, Syslog-ng)

If of interest then please send over your most up to date CV to be considered.