SecOps Engineer

• A pragmatic approach to information security developed through at least 5 years of hard experience.
• Solid knowledge of IT infrastructure security concepts, including operating systems, network devices and protocols, cloud technologies, and secure data sharing workflows.
• Hands-on experience in a variety of information security technologies including:
o Identity and access management
o Network access control
o Threat intelligence
o Endpoint Protection EDR, KASÊRSKY
o Vulnerability detection
o Data loss prevention
o Next-generation Firewall technology, both physical and virtual (Palo Alto)
o Database security
o File integrity monitoring
o URL filtering and proxy solutions
o VPN technologies
o Intrusion prevention and detection systems
o PKI knowledge
• Fluent business English.

We are looking for someone who will be responsible for the daily operation and tuning of the systems and controls that defend our assets and customers, along with project work to implement new initiatives.
They will also work on broader initiatives with the global information security team and work closely with the security operations center.

They will be dedicated to evaluating and configuring information security products in compliance environments and understanding the hidden risk implications within IT and business complexities. They will escalate critical issues with clarity and work to obtain the correct data.

They will perform the implementation, monitoring, and operation of different security systems to protect everything relevant to the company. Study and possible resolution of company vulnerabilities in relation to security risks and implementation of risk mitigation strategies.

Activities:

• Analyze, develop, and maintain information security governance, including the organization's policies, procedures, standards, and guidelines regarding information security.
• Support business and technology areas in the design, implementation, deployment, and maintenance of systems that start and remain secure throughout their lifecycle.
• Administer and support antivirus solutions.
• Evaluate new threads and possible impacts based on the understanding of vulnerabilities and exploits using knowledge of network operations (firewalls, IDS, WAF, etc.), operating systems (Windows, Linux,...) and application infrastructure (Application / Web Servers, Databases, Active Directory, etc.) to select and implement appropriate controls.
• Administer authentication and access controls, including provisioning, changes, and deprovisioning of user and system accounts, access roles, and access permissions to information assets.
• Monitor the organization's network and systems for security requirements and determine technical solutions to address them and work with relevant stakeholders to implement them.
• Analyze and respond to information security incidents, including investigation of countermeasures and recovery from them (cyber attacks, unauthorized access, data breaches...)