CyberSecurity Engineer

• Creation of custom internal scripts for automating tasks, analysing data and integrating APIs to connect to security platforms and infrastructure tools.
• Deployment, management, hardening of servers based on Linux, Windows and Vmware ESXi technologies.
• Deployment, configuration, maintenance of network devices (switches, routers, firewalls, VPN gateways).
• Preparation of comprehensive vulnerability assessment reports, remediation plans, dashboards, metric reports, and operational procedures.
• Management of vulnerability lifecycle processes including identification, assessment, prioritization, remediation tracking, follow-up, and verification across on-premises and cloud environments.
• Coordination and review of remediation efforts across multiple teams, ensuring timely patching, configuration changes, and security updates.
• Reporting of tasks progression, identified vulnerabilities, high-risk assets, risk exposure, actively exploited threats, ticket trends, KPIs, and other relevant security metrics to peers, stakeholders, and management.
• Interaction with IT infrastructure teams, development teams, cloud operations, security operations center (SOC), compliance officers, and external vendors to ensure coordinated and effective remediation efforts.
• Design, orchestrate, and deploy infrastructure and services to improve the availability,
• scalability, latency, and efficiency of cyber threat landscape management services and data.
• Write documentation to communicate solutions to engineers and users.
• Solve problems relating to mission critical services with a focus on using automation to prevent problem recurrence; with the goal of automating response to all non-exceptional service conditions and building better technologies versus manual resolution.

The following specific knowledge, skills and expertise are required for the performance of the above listed tasks:

• OS Administration: Deep expertise in Linux, Windows and VMware ESXi Server environment management.
• Programming: Advanced scripting skills for automation (Python, Bash), data parsing, and API interaction.
• Network Security: Strong knowledge of TCP/IP, firewalls, VPNs, and network protocols.
• Cloud Infrastructure: Experience using and securing AWS and Azure
• Tools: experience in enterprise vulnerability scanners (Rapid7 Nexpose, Nessus), SIEM platforms (Splunk) and ticketing systems (Service Now, Jira).
• Ability to cope with fast changing technologies used in hybrid cloud environments, containerized applications (Docker, Kubernetes), DevSecOps pipelines, and emerging attack vectors requiring continuous adaptation of scanning and assessment strategies.
• Familiar with message broker applications (e.g., Apache Kafka, AWS SQS, Google Pub/Sub, RabbitMQ).
• Knowledge of cybersecurity and cyber intelligence domains.
• Experience working with and implementing workflows using APIs between technologies.
• Desirable, but not required, to have experience in programming, preferably in Python, Java, GoLang, or Rust.

Due to the nature of a large international organization, and due to the nature of activities in the cybersecurity domain, the consultant should also have the following non-technical skills:

• Ability to integrate and work efficiently in an international/multicultural environment
• Capacity to work on multiple large projects
• Rapid self-starting capability
• Ability to establish trusting relationships with counterparts in partner organisations
• Excellent team player
• Ability to understand, speak and write in English at C1 level
• Knowledge of French and other EU languages will be considered an asset
• High degree of discretion and integrity

Security clearance

The required level is SECRET-EU / EU-SECRET. If not yet security cleared, the proposed candidate must be prepared to undergo security screening.