IS/IT Global Security Engineer (Cyber Tribe)

Location: Bucharest, Romania<p></p><p></p><p><a href="https://www.thalesgroup.com/en" rel="noopener noreferrer" target="_blank">The people we all rely on to make the world go round – they rely on Thales.</a>  Thales rely on its employees to invent the future: right here, right now.</p><p></p><p>Present in Romania for over 40 years, <a href="https://www.youtube.com/watch?v=yeSuh452V44" rel="noopener noreferrer" target="_blank">Thales is expanding its presence in the country</a> by growing its Digital capabilities and by developing a Group Engineering Competence Centre (ECC). Operating from Bucharest, Thales delivers solutions in a number of core businesses, from ground transportation, space and defence, to security and aeronautics.<br/>Several professional opportunities have arisen. If you are looking for the solidity of a Global Group that is at the forefront of innovation, but with the agility of a human structure that tailors to the personal development of its employees and allows opportunities for evolution in an international environment, then this is the place for you!</p><p></p><p><b>Context:</b></p><p>Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.</p><p></p><p>Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better, and keep us safer. We innovate across five major industries; Aerospace, Defence, Ground Transportation, Security and Space.</p><p></p><p>We are building a new squad in Romania, which will be responsible for the delivery of the civil security operations service across the world.  Working in partnership with <span>Cyber Digital Solutions Business Line</span>, we will ensure that all the internal SOC requirements are captured, the technology stack is optimal and we will evolve the service to defend against the next generation of cyber threats to Thales.</p><p></p><p>This role will be part of the global Cyber Defence Tribe, and fully integrated into the NextGen IS team, working closely with our partners and stakeholders to integrate SOC services into the wider NextGen IS deliverables. </p><p></p><h2>Role:</h2><p>An IS/IT engineer who can help design, deploy and configure a range of operational cyber security tools. From a technical background, someone who is able to design and understand how security tools sit within an overall defensive model.</p><p></p><p><b>Responsibilities include:</b></p><p>The role is varied, and so is the technology you’ll get exposed to.  We understand that not everyone will have extensive experience of all technologies that we use, so we’re looking for candidates that either have some experience in similar technologies listed below, or, more importantly, a keenness to develop and learn:</p><ul><li>Security monitoring solutions, such as Microsoft Sentinel, Defender, QRadar, SecOps, and Splunk.</li><li>Log management concepts, with knowledge of log management platforms and associated infrastructure, such as Splunk, BigQuery, Log Analytics, Elastic etc.</li><li>Threat detection methods with tools such as Trellix and Defender, and inbuilt capabilities in AWS/Azure/GPC and other infrastructure such as proxies and firewalls etc.</li><li>Vulnerability scanning tools, such as Tenable or Rapid7.</li><li>Underlying infrastructure requirements to support the tools, such as hosting and networking experience. </li></ul><p></p><p>In addition, some awareness of how SOCs detect threats, including:</p><ul><li>Dependencies on the infrastructure, i.e. source log generation. </li><li>Knowledge of the M365 suite of security tools, including Defender, Defender for Endpoint, Purview, Azure Information Protection policies.</li><li>Ability to build and configure log management in hybrid environments, including transport and storage.</li></ul><p></p><p>In general, an ability to understand security concepts across a wide range of vendors, but also good communication skills to be able to communicate concepts and designs to a wide audience.</p><p></p><h2>Experience:</h2><ul><li>3 years’ or more experience in a technology focused role</li><li>Understanding of enterprise infrastructure, such as networking, hosting and cloud architectures</li><li>Ideally a good understanding of cyber security concepts and risks/threats to Thales from cyber attackers.</li><li>A willingness to work in a global environment</li><li>English speaking essen