Certified Cyber Security Analyst

Base 3

Brussel, Belgium

1 day ago

Apply on www.careerboard.com

Prepare application

Role details

Contract type

Temporary contract

Employment type

Full-time (> 32 hours)

Working hours

Regular working hours

Job source

www.careerboard.com

Tech stack

IEEE 802.1X Application Firewall Software System Penetration Testing VoIP Software as a Service Cloud Computing Cyber Security Information Systems Databases Continuous Integration Middleware Infrastructure as a Service (IaaS)

+17 more

Identity and Access Management Network Security Open Web Application Security Platform as a Service (PAAS) Public Key Infrastructure IBM Resource Access Control Facility Sherwood Applied Business Security Architecture Secure Coding Software Engineering Virtualization Technology Wi-Fi Technology Cloud Platform System Software Security Test Scripts Infrastructure Automation Frameworks Information Technology Malware Detection

Job description

Define and advise on the design, implementation, and test processes necessary to protect information system assets.
Perform risk assessments and translate the security architecture and high-level policies and controls towards security requirements (secure by design) for business and IT projects.
Contribute to the architectural design and validate it against the security requirements
Define security testing requirements and penetration test scope, actively support the testing teams to perform these tests and approve the test reports.
Define, implement, and ensure the proper functioning of security services of our department in line with IT security policies.
Recommend and advise on new or improved security services towards the division management.
Produce documented security services, technical standards, or principles.
Act as a security subject matter expert within a certain domain (for example Mainframe security, PKI and Cryptography, Network security, platform security, IAM, application security or secure coding), being the point of contact for both business and project teams. Your stakeholders are the business owners/analysts, project leader, risk management, internal/external auditors and off course the engineers, developers, and architects.

Requirements

Proven experience in security risk assessments, development of functional security requirements, process design and management reporting.
Familiarity with industry best practices in key security domains such as: identity and access management, PKI, network security, data protection.
Application security knowledge with a good understanding of software development and testing, OWASP (Open Web Application Security Project) guidelines, code scanning tools, security and compliance automation using a CI/CD pipeline.
Knowledge of and experience with security technologies including IDAAS (Identity as a service) and identity management platforms, Secure access management and federation services, PKI and cryptographic solutions, web application Firewalls, endpoint security
Knowledge of and experience with security technologies covering domains Virtualisation, Software Defined Networks, Cloud IAAS/PAAS/SAAS, Network and DMZ infrastructure, VOIP, Wi-Fi, 802.1x, Anti-malware, System protection, Middleware, Collaboration and end-user workspace solutions, Storage (SAN, NAS), Databases, infrastructure automation services (Infrastructure as a code)
Preferred professional certifications are CISSP, GIAC, SABSA, ISO 27001 LA/LI. Specific Security related Product certifications are considered an asset.