Technology Specialist - Security

Expected

• AzureDevOps

• Confluence

• Zephyr

• SonarQube

• CEH

• CIR

• CISM

• CISA

• CGEDIT

• VMWare ESXi

• storage

• Azure

• AWS

• 1-3 years working experience in security operations and advanced level of understanding regarding systems security at both technical and procedural level

• Operational experience in securing one or more of the following solutions:

• low /no-code platforms

• Robotics process automation (e.g. UiPath)

• Integration and middleware platforms (Boomi, API Connect, SAP PO)

• SLDC Tools (E.g. AzureDevOps, Confluence, Zephyr, SonarQube)

• Microsoft Powerplatforms

• Possessing a solid understanding and have experience with systems automation platforms and technologies

• Certifications such as CEH, CIR, CISM, CISA, CGEDIT, any of the OWASP or similar are a plus

• Knowledge of industry standard security frameworks for information systems (NIST, ISO 27001/2, CSA, COBIT), the Cyber Kill Chain & MITRE ATT&CK framework

• Being able to translate technical language into a story that can be understood, and cohesively present it back to different stakeholders with a clear message

• Bachelor's degree or equivalent experience

• Have a passion for security and enjoys solving problems

• You understand the Agile mindset and have basic knowledge on working in a Scrum Team. You show end-to-end ownership on work that you do.

• Excellent knowledge of English, written and verbal

• You have experience with outsourced managed services

• You look for structural solutions over one-time quick fixes

• Experience representing technical viewpoints to diverse audiences and in making timely and prudent technical risk decisions

• Knowledge of industry-standard security frameworks for information systems (CVSS, CIS Benchmarking, OWASP, NIST, ISO 27001/2, CSA, COBIT)

• Relevant technical knowledge on securing platforms/solutions such as robotics automation platforms, low/no-code platforms, integration and middleware (for a complete list see section above).

• Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc.).

• Identity and access management

• Securing other infrastructure. E.g.: Active Directory, Azure AD)

• System security (operating systems, applications), networking, and web applications

• Enabling services (e.g. NTP, SMTP, patching, Antivirus)

• Server infrastructure (VMWare ESXi, storage, Azure, AWS)

• basic cryptography knowledge (basic algorithm knowledge)

• DB security knowledge

• authentication protocol knowledge

• Key storage solutions, security monitoring solutions (e.g. Splunk), SSO, security solutions (SSL, Remote Access, IPSEC, Reverse Proxy, IDS/IPS, Firewall)