CyberSecurity Engineer

Description of Tasks

The external service provider will perform the following tasks:

• Creation of custom internal scripts for automating tasks, analysing data and integrating APIs to connect to security platforms and infrastructure tools.
• Deployment, management, hardening of servers based on Linux, Windows and Vmware ESXi technologies.
• Deployment, configuration, maintenance of network devices (switches, routers, firewalls, VPN gateways).
• Preparation of comprehensive vulnerability assessment reports, remediation plans, dashboards, metric reports, and operational procedures.
• Management of vulnerability lifecycle processes including identification, assessment, prioritization, remediation tracking, follow-up, and verification across on-premises and cloud environments.
• Coordination and review of remediation efforts across multiple teams, ensuring timely patching, configuration changes, and security updates.
• Reporting of tasks progression, identified vulnerabilities, high-risk assets, risk exposure, actively exploited threats, ticket trends, KPIs, and other relevant security metrics to peers, stakeholders, and management.
• Interaction with IT infrastructure teams, development teams, cloud operations, security operations center (SOC), compliance officers, and external vendors to ensure coordinated and effective remediation efforts.
• Design, orchestrate, and deploy infrastructure and services to improve the availability,
• scalability, latency, and efficiency of cyber threat landscape management services and data.
• Write documentation to communicate solutions to engineers and users.
• Solve problems relating to mission critical services with a focus on using automation to prevent problem recurrence; with the goal of automating response to all non-exceptional service conditions and building better technologies versus manual resolution.

Specific Knowledge, Skills and Expertise

The following specific knowledge, skills and expertise are required for the performance of the above listed tasks:

• OS Administration: Deep expertise in Linux, Windows and VMware ESXi Server environment management.
• Programming: Advanced scripting skills for automation (Python, Bash), data parsing, and API interaction.
• Network Security: Strong knowledge of TCP/IP, firewalls, VPNs, and network protocols.
• Cloud Infrastructure: Experience using and securing AWS and Azure
• Tools: experience in enterprise vulnerability scanners (Rapid7 Nexpose, Nessus), SIEM platforms (Splunk) and ticketing systems (Service Now, Jira).
• Ability to cope with fast changing technologies used in hybrid cloud environments, containerized applications (Docker, Kubernetes), DevSecOps pipelines, and emerging attack vectors requiring continuous adaptation of scanning and assessment strategies.
• Familiar with message broker applications (e.g., Apache Kafka, AWS SQS, Google Pub/Sub, RabbitMQ).
• Knowledge of cybersecurity and cyber intelligence domains.
• Experience working with and implementing workflows using APIs between technologies.
• Desirable, but not required, to have experience in programming, preferably in Python, Java, GoLang, or Rust.

Due to the nature of a large international organization, and due to the nature of activities in the cybersecurity domain, the consultant should also have the following non-technical skills:

• Ability to integrate and work efficiently in an international/multicultural environment
• Capacity to work on multiple large projects
• Rapid self-starting capability
• Ability to establish trusting relationships with counterparts in partner organisations
• Excellent team player
• Ability to understand, speak and write in English at C1 level
• Knowledge of French and other EU languages will be considered an asset
• High degree of discretion and integrity

Security clearance

The required level is SECRET-EU / EU-SECRET. If not yet security cleared, the proposed candidate must be prepared to undergo security screening.