Cyber Vulnerability and Penetration Consultant

You will be aggregating, transforming, analysing, interpreting or enriching cyber threat information in order to provide the necessary context for decision-making processes;

Developing and disseminating impactful Cyber Threat Information (CTI) in the face of millions of indicators and alerts and delivering actionable cyber threat information to the client’s senior management and the Cybersecurity Operations Centre (SOC).

• Design the basics of a Threat-informed defence (TID) against vulnerabilities to threats
• Design and implement the use of MITRE ATT&CK to Map and Track Adversary TTPs
• Design and implement steps to aligning the CTI with SOC and IR.
• Contribute to achieving early warning for cyber resilience with an actionable CTI.
• Planning of coordination, training and awareness activities related to the Cyber Threat Landscape (CTL);
• Proposal of practical solutions to improve the procedures and tools supporting the CTL activities.
• Support the Unit with updating core documents, which may include:
• Preparation and maintenance of Monthly and quarterly Cyber Threat Reports

• What do you need to succeed in this position?
• A Masters degree and at least one ICT Security professional certification is also required.
• In-depth knowledge of methodologies, processes, tools and frameworks on cybersecurity, including the emerging threats
• 6 years of professional relevant experience, including:
• Operational and technical experience related to cyber-defence deployment/operation of a SOC, CSIRT, Security assessment platform or technical Security infrastructure (PKI, endpoint…); and
• Experience as a team leader or technical leader for major security-related projects in the Cyber Threat Landscape area.
• Proven experience with managing internal and external stakeholders in order to collect the relevant information on emerging cyber threat
• Experience with vulnerability scanning tools and techniques (e.g. Nmap, Nessus, Acunetix, Tripwire, Burp)
• With penetration testing using various tools (including Kali, metasploit)
• Good knowledge of Enterprise Risk Management, Cybersecurity & Cyberthreat Intelligence frameworks and tools: (MISP, TAXII, STIX)
• Good understanding of SIEM methodologies
• Good communication skills, ability to lead multi-lingual meetings and to do presentations to managers, technical staff and also end-users in the context of user awareness activities
• Leadership, autonomy and commitment to increasing maturity
• A fluency in the English language (both oral and written) is expected. French is an asset

A particularly attractive salary package, with many additional benefits, to attract the best of you. A professional and stimulating work environment in the field of telecommunications. Multiple career opportunities within a changing group, advanced training in new technologies, rich and recognized expertise. Your application will be treated with confidentiality. We would be very happy to organize a first appointment to talk to you about this opportunity and consider your next career development. Send us your CV

EKXEL IT Services, is a European leader in IT engineering, high-tech consulting and IT services. We offer a unique blend of expertise and support major European groups with international vocation to implement and succeed in their project to transform and modernize their information systems.