Enterprise Hosting Security Lead

<p><span><b><b>Job Description:</b></b></span></p><p>Job Summary:</p><p></p><p><span>NAVBLUE, an Airbus Company, is opening a new position within its Enterprise Hosting Department. The main objective of this entity is to define, provide and support the production environments used by all NAVBLUE’s customers.It is divided into 4 different teams, Hosting Engineering, Hosting Delivery, Hosting Operations and Hosting Security supporting all the topics related to Solutions Hosting within NAVBLUE: from engineering to the monitoring and support of the solution.NAVBLUE solutions are currently hosted mainly in AWS Cloud using a combination of native AWS cloud solutions and VMware on AWS.</span></p><p></p><p><span>To support the team growth and its new organization, we are looking for a Team Leader for the Hosting Security Group.</span></p><p></p><p><span>The position holder will lead the newly created Enterprise Hosting Security Entity. The goals of the entity are to:</span></p><p><span> which goals are to:</span></p><ul><li><p><span>Reactively and proactively resolve the security items raised by policy, results of scanning and other items for NAVBLUE Products. </span></p></li><li><p><span>Monitor and resolve security items that are related to hosting.</span></p></li></ul><p></p><p><span>The first responsibility of the Lead being to define and structure the activity in coordination with other stakeholders. </span></p><p></p><p><span>The role requires a deep understanding of the cyber-security topics and of the hosting technologies, a capacity to structure an activity in an industrial environment and a capacity to lead the team, prioritize the activities and perform trade-offs on a daily basis.</span></p><p><br/><br/> </p><p>Responsibilities:</p><p></p><p><span>The Hosting Security Lead will have the following responsibilities:</span></p><ul><li><p><span>Structure the Security Operations activities with all the internal stakeholders working on the topic: Security Officer, IT, Software Factory/Architects and potentially Airbus.</span></p></li><li><p><span>Define the priorities of this group in coordination with the different stakeholders: Security, IT, Operations, Hosting Expert, Ho Enterprise Hosting and the other Leads and report on the progress.</span></p></li><li><p><span>Manage a security backlog in Agility and follow-up on the grooming and progress with the team.</span></p></li><li><p><span>Optimize the team organization depending on the context (team growth, activity perimeter…).</span></p></li><li><p><span>Ensure the process and standard definition when it comes to Hosting Security Practices.</span></p></li><li><p><span>Define and review the yearly operational goals of the team members.</span></p></li><li><p><span>As a delegate of the Head of Enterprise Hosting, manage the daily management of the team members through regular 1:1.</span></p></li><li><p><span>Define the follow-up of the activities (multi-site) and the way to report on it to Ho Enterprise Hosting (dashboards).</span></p></li><li><p><span>If a need to contract some activity is identified during the set up phase:</span></p><ul><li><p><span>Contribute to the Definition and Set up of the contract with the Head of Enterprise Hosting,</span></p></li><li><p><span>Follow-up contractor performance on the Security perimeter.</span></p></li></ul></li><li><p><span>Animate the Group through daily/weekly meetings.</span></p></li></ul><p></p><p><span>Beyond these activities, the Hosting Security Lead will work as SecOps Specialist with the following responsibilities (to be refined during the structuration phase):</span></p><ul><li><p><span>Security monitoring.</span></p></li><li><p><span>Coordinate with the Security Policy team to determine required &amp; future actions (reactive &amp; proactive).</span></p></li><li><p><span>Configuration Management of Security Management items such as OS patching.</span></p></li><li><p><span>Security Activities - patches / vulnerability watch / coordination with SWF about it.</span></p></li><li><p><span>OS Patching &amp; maintenance including setup and configuration</span></p></li><li><p><span>Periodic review of process / activities to ensure compliance with Security Policies.</span></p></li><li><p><span>Establish best-practice activities with the team to promote security practices.</span></p></li><li><p><span>Feedback to Security Policy team to help maintain appropriate guidance based on Operational needs &amp; observations.</span></p></li><li><p><span>Accelerate enterprise cloud adoption of security practices.</span></p></li><li><p><span>Design and Implement cloud solutions based on governance to minimize business and technical risks.</span></p></li></ul><p></p><p>Education :</p><ul><li><p>Successful completion<span> of an Academic degree in IT engineering with a specialisation in Cyber-Security or 7-10 years of equivalent workplace experience.</span></p></li></ul><p></p><p>Required Skills / Experience :</p><ul><li><p><span>