Cloud Native Security Engineer (PERCI Kubernetes)

• Installation, configuration, maintenance and upgrades of cyber security solutions and components, with a specific focus on cloud native technologies (containers based on Docker/Kubernetes, etc.)
• Monitor managed components and manage incidents and problems
• Perform day-to-day system management with regards to cloud native security components, on premises as well as on public cloud deployments (AWS and Azure Cloud)
• Harden system and network components
• Develop, maintain and roll-out reference configurations
• Implement and follow security policies
• Develop and maintain system inventory/CMDB, system documentation, operating procedures for all the work performed
• Report on service performances and availability, produce dashboards
• Design, develop, install, configure, test, monitor, maintain, troubleshoot and upgrade cyber security infrastructure with a specific focus on cloud native technologies (containers based on Docker/Kubernetes, etc.)
• Provide expertise, guidance, recommendations and documented security configurations for implementation of security tools and processes
• Produce detailed engineering specifications
• Evaluate and recommend secure configurations
• Identify security requirements, based upon need or translate high-level security requirements into detailed technical requirements
• Support various technical and non-technical stakeholders to specify and negotiate security requirements
• Interact with network and system engineering teams to effectively communicate and develop security solutions

-Draft documentation and standard operational procedures to support security systems operations

• Ensure the technical design and contributes to implementation of new components and/or enhancements in coordination with other team members in particular project managers, security architects and engineers.
• Support data integrity assurance work is completed through appropriate back-ups methods to ensure RTO are met
• Support security monitoring use-case engineering
• Security events collection technical design. Integration of log sources into a SIEM solution.
• Elaboration and translation of the security monitoring policy into monitoring rules
• Investigate, diagnose and solve system related problems with regards to security services and infrastructure, on-premises as well as on public cloud deployments
• Diagnose and solve problems and faults occurring in the operation of cyber security components
• Comply with organization procedures to ensure integrity of the system
• Recommend resolutions and improvements
• Provide consolidate findings on components or processes
• Document cyber defence components configurations
• Ensure that communication performance, recovery, and security needs meet agreed service agreement standards
• Contribute to define network design policies, philosophies and criteria
• Craft, fine-tune and validate low level intrusion detection rules for network and host protection
• Development, test and roll-out new releases of Identity and Access Management solutions according to Europol’s standards

Requirements

Mandatory

• More than 6 years of experience in security and system engineering
• A minimum of 2 years of experience in network and system security administration
• A minimum of 2 years of experience in Kubernetes/cloud native security engineering
• Good knowledge of authentication, authorization and accounting (IAM, Federation, RBAC, service accounts) for on-premises and public cloud deployments
• Good knowledge of container security for on-premises and public cloud deployments
• Good knowledge of administration and task automation using scripting and/or programming languages (e.g. Python, PowerShell, Perl, Java) for on-premises and public cloud deployments

Desirable

• A minimum of 2 years of experience in Kubernetes/cloud native security testing
• Good knowledge of Network Protocols for on-premises and public cloud deployments
• Good knowledge of Security protocols for on-premises and public cloud deployments
• Good knowledge of Cryptographic solutions for on-premises and public cloud deployments
• Good knowledge of auditing systems and networks for configuration weaknesses and vulnerabilities for on-premises and public cloud deployments
• Good knowledge of hardening/Securing of Unix-like systems, logging/detection, and general systems design for on-premises and public cloud deployments
• Good knowledge of security monitoring and automated response for on-premises and public cloud deployments
• Good knowledge of enterprise Active Directory and GPO development for on-premises and public cloud deployments

Certification

Certified Kubernetes Security Specialist, Azure Security Engineer Associate (AZ-500), GSEC (GIAC Certified Security Essentials), GCUX (GIAC Certified UNIX Security Administrator), Linux Foundation Certified System Administrator (LFCS), CCSP, CCSK or similar