At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing and we are looking for a professional Senior ICT Security Manager to join our UniQue Ispra team.
In this role, you will have the opportunity to work closely with our customers in the public sector and you will be responsible for developing new business by identifying profitable opportunities, maintaining your client portfolio by building strong, long-lasting relationships, and monitoring the progress of the projects, with the aim to provide excellent client service and added value services.
What will you be bringing to the team:
- Provide ICT Security services requiring specific knowledge in hacking tactics, techniques and procedures.
Help developing the ICT cyber security strategy and controls in order to respond to cyber incidents in a more efficient way. To do so, the external provider will be mainly focused on monitoring the security logs coming from different sources in order to timely detect possible security incidents or attempts in the European Institution's IT infrastructure. Administration of Security Information and Event Management (SIEM) system; Design, implement, monitor, audit and maintain IT security baselines (hardening) and policies; IT security monitoring and incident management; Document, evaluate existing solutions and propose risk mitigation solutions to enhance security and reduce risk exposure; Execute security vulnerability testing; Take on additional tasks as required in the interest of the service. Requirements
What do you need to succeed in this position?
- Master Degree + 13 years of IT professional experience in the domain
At least 6 years of professional IT experience in the domain; Broad understanding of network security products and principles, including IPS, firewalls, DNS, and protocols; Technical experience working in a Windows client/server environment; Broad experience in using Security Information and Event Management tools; Broad experience in monitoring systems and networks for intrusions; Proven experience using Splunk, or other popular SIEM product, including administration, customization, optimization and dashboards definition; Ability to draft security uses cases (reporting, alerting and searching) Proven experience in log management, identifying, collecting and parsing log information to respond to and mitigate advanced threats; Proven experience using Cisco SourceFire and/or Fortigate IPS/IDS; Understanding of security issues enterprises face including economic espionage and insider threats; Understanding of security audits, risk analysis and penetration tests; Understanding of the Lockheed Martin Cyber Kill Chain and Intelligence Driven Response; Demonstrated experience in enterprise-level security incident handling; Broad understanding of network security products and principles, including IPS, firewalls, DNS, and protocols; Excellent penetration test and ethical hacking skills; Excellent knowledge of IT security monitoring and Incident management; Experience in implementing IT security and audits policies; Administration knowledge of Nessus Vulnerability Scanner, Splunk, Metasploit framework; Knowledge of Cisco network devices such as ASA firewalls, ISE, Web Security Appliance, etc. ; A very good knowledge of English.