Cloud Security and Automation Analyst

Location:
Mons, Belgium

Security Clearance:
NATO Secret

Reference No:
C003869 / Mons

Introduction:
As a Cloud Security and Automation analyst, the consultant will provide detailed analysis of logs and network traffic and technical subject matter of expertise for automation on cloud infrastructure.

Skills, knowledge, experience required:

• A university degree from a nationally recognised/certified university in a technical subject with substantial IT content and 3 years’ specific experience (exceptionally, lack of a university degree may be compensated by a demonstration of at least 5 years’ extensive and progressive expertise in the duties related to the post);
• Expertise in at least three of the following areas and a high level of experience in several of the other areas:
• Security monitoring and analysis using a variety of security event generating sources (e.g. firewalls, IDS, routers, EDR and AV);
• Cloud architectures and technologies (AWS and/or MS Azure);
• Managing security operations in public cloud services (AWS and/or MS Azure);
• Microsoft Sentinel;
• AWS cloud security tools;
• Splunk ES suite and Splunk Seach Processing Language (SPL);
• Phantom SOAR playbook development;
• Security use case development aligned to the MITRE ATT&CK Framework.

Desirable:

• Industry leading certification in the area of cybersecurity, such as GCIA, GPCS, GCLD, GNFA, GCIH, CCSP, GSFE, GCFA, GCED, OSCP;
• A solid understanding of information security practices relating to the Confidentiality, Integrity and Availability of information (CIA triad);
• Experience working with full packet capture systems, e.g. Niksun, RSA/Net Witness.

Duties/role:

• Analysing and responding to alerts originating from complex cloud infrastructure deployments and on-premise network and security devices;
• Identifying security gaps in NATO cloud security infrastructure and developing custom detection content within cloud environments;
• Developing and maintaining cloud-specific use cases in our on-premise SIEM solution (Splunk Enterprise Security).

Additional information:
If you are interested, please reach out to this offer’s point of contact for further information.

VECTOR SYNERGY sp. z o.o., ul. Marcelińska 90, 60-324 Poznań, NIP PL7811857270, REGON 301575740, KRS: 0000369575
Rejestr Przedsiębiorców KRS prowadzony przez Sąd Rejonowy Poznań – Nowe Miasto i Wilda w Poznaniu, VIII Wydział Gospodarczy KRS, kapitał zakładowy wynosi: 73.852,80 złotych wpłacony w całości, TEL +48 616684500, FAX +48 616684501, www.vectorsynergy.com, info@vectorsynergy.com