Description

As an Information Security Engineer, you will play a crucial role in enhancing security operations by managing vulnerabilities, implementing innovative solutions, and integrating advanced technologies like AI. Your work will ensure the safety of cloud environments and contribute to the overall security strategy.

Requirements

• •University degree in relevant discipline or several years of relevant experience
• •CISSP or similar certification advantageous
• •Effective English communication and some knowledge of French
• •Implementation, operation, and maintenance of ISMS
• •Proven ownership of vulnerability management lifecycle
• •Remediation engineering for cloud/K8s/endpoints/applications
• •Excellent interpersonal, communication, and teamwork skills
• •Critical thinking with methodical, proactive, and organized approach
• •Excellent time management and ability to work under pressure
• •Engineering of IT Security solutions for networks and systems
• •Threat modelling and design following Secure-by-design
• •Experience implementing Zero Trust

Tasks

• •Own the end-to-end vulnerability management lifecycle across cloud, Kubernetes, endpoints, and applications
• •Leverage existing protection, detection, and response solutions
• •Coordinate red-teaming services for maximum benefit
• •Supervise and coordinate the implementation of innovative security solutions
• •Operationalize threat intelligence handling
• •Integrate AI and playbook-based automations into security operations
• •Contribute to the continuous improvement of security operations
• •Maintain contacts with information security interest groups and specialist forums
• •Implement, operate, and maintain an Information Security Management System (ISMS)
• •Participate in security operations activities in high-availability environments
• •Manage the vulnerability lifecycle in complex operational environments
• •Perform remediation engineering for cloud, Kubernetes, endpoints, and applications
• •Engineer IT security solutions for networks, computer systems, containers, and applications
• •Define requirements and conduct verification and validation of security solutions
• •Conduct threat modeling and define high-level and low-level designs following Secure-by-design principles
• •Implement Zero Trust security architecture