Incident Management Security Technical Expert

Job Description

All services, offers, technological platforms, are hosted and operated in public cloud environments (Azure), and make an extensive use not only of IaaS services but also of PaaS/SaaS services.With the number of cybersecurity threats growing and the need to have cybersecurity built into the platform, we need to grow our cybersecurity team to answer the new initiatives and accelerate what has already started.Reporting to the SecOps Leader, we are looking for a cybersecurity professional to reinforce the team.The SecOps services of the Ops team consists of:
• managing security operations services such as vulnerability watch, vulnerability scans, Security Operations Center (SOC) and Security Incident and Event Management (SIEM)
• providing guidance and expertise to the Platform Ops team in its day-to-day work
• participating in a DevSecOps framework with the Cybersecurity Architects, IS officers and development teams of the IoT offers/platforms/services
• getting the DevSecOps team processes and policies aligned with the SE end-to-end cybersec strategy
Responsibilities & duties: We are looking for a cybersecurity officer who would have a primary focus on Vulnerability management activities and IAM (Identity Access Management).S/he would primarily be in charge of supporting the Incident Response Process:Manage the Incident Response process and SOC/SIEM services for the DevSecOps team not referring here to the day-to-day management of alerts (which the TechOps team is responsible for) but about:
• • organization of the different stakeholders around these services
  • governance of the services
  • project management for new projects/services/offers
  • link to the SE corporate SOC and IR processes
  • communication and reports
• perform some audits, and design security architecture for the tools used by the Ops team and for ad-hoc needs related to managed environments
• perform some evaluations and proof of concept projects of security operations technologies
S/he would also be supporting the following key activities and requirements
• Organize and participate in Vulnerability Management activities:
  • manage vulnerability identification sources (vuln watch, vuln scans, corporate CERT bulletins, audit reports, pen tests reports, etc.)
  • run the SE corporate vulnerability management process for the different Technology Platforms and Connected Offers managed by the Ops team;
  • communicate and obtain collaboration from our Ops community;
  • provide reports to management and SE corporate product CERT
  • drive Remediation thru the Ops organization
• Organize and participate in Identity Management Activities:
  • Monthly review of access right across Azure Active Directory
  • Extension of this activity to Azure DevOps
, * Skills Required: 7+ years of relevant experience in cybersecurity, especially around
• Cybersecurity project management
• Security operations management
• Azure security services and operations
• Auditing security architecture, performing risk analysis
Familiar either with IoT and Cloud PaaS/IaaS environments (Microsoft Azure, AWS), or demonstrate ability to acquire this familiarity in a challenging timelineExperience in a small/medium organization delivering services inside a large ecosystem would be a plusCertifications such as CISSP or ISO 27000 or ethical hacking would be a plusPersonal qualities & behavioral traits
• Clear communication in English written and verbal able to discuss with a wide range of different profiles/cultures/management levels
• Team player able to find its place in our Ops community and to lead by influence
• Tech-savvy Information Security Professional able to think beyond classic IaaS-based security paradigms: a large part of the IoT offers and platforms is PaaS- or SaaS-based (Azure/AWS) and involves IoT technologies, thus making classic IT perimetric security approaches inefficient;
• Autonomous and proactive Information Security professional able to propose and implement solution in our agile and fast-moving IoT environment
Education: - Masters or Bachelor s degree in Computer Science, Computer Engineering or related technical discipline

Keyskills :
inspectionequipment supplyaudit reportssecurity operations center