Consultant CSIRT L1

Les entreprises et les gouvernements comptent sur Thales pour apporter de la confiance aux milliards d'interactions numériques qu'ils établissent avec les utilisateurs. L'Activité Mondiale Identité & Sécurité Numériques (DIS) fournit des technologies et services (des logiciels sécurisés en passant par la biométrie ou encore le cryptage), qui permettent aux entreprises ainsi qu'aux gouvernements de vérifier des identités, et de protéger les données afin qu'elles restent sûres.

Tasks, responsibilities & prerequisites:
Incident:

• Process all Security incidents by following the procedures (Take Down, CVE publication, basic log mining, breach analysis (data collection and first analysis), doubt removal (data collection and first analysis), malicious documents analysis (basic triage).
• Daily survey and notifications
• Manage all customers' requests on products sold by the company
• Manage all incidents, change and uses cases tickets

Change:

• Deliver missions sold to customers:
• Perform incident response readiness Assessments for customers.
• perform audit and consultancy missions
• Help when required the incident handler.
• Manage all incidents, change and uses cases tickets.
• Participate when required to CERT community mandatory events.

Projects:

• Work in complete autonomy on the projects assigned
• One-day mandatory per month dedicated for fixing applications issues further to planning given by CSIRT Manager
• Book one-day mandatory per month for self-training on defined scope further to planning given by CSIRT Manager

General:

• Respect all instructions included within the signed CCoP – CSIRT Code of Practice
• Comply with the data protection regulations at our customers
• Secure the field, respect procedures when performing forensic acquisitions and triage.
• Account accurately and in time in Kapla.
• Maintain the skill matrix and CV accurately.

Reporting:

• Maintain continuously the documentation
• Respect reports structure
• Respect process of publication validation (cross-reading and validate)

Skills

• Listening capacity (identify needs and crisis situation)
• Methodic (be organized, be able to anticipate, respect methodology and best practices, guarantee constant accuracy in documentation and realization of missions, etc.)
• Communication (spoken and written both in French and English)
• Commitment (constant can do attitude and willingness on reaching customers' satisfaction in order to respect engagement towards team and customers)
• Consistency in maintaining soft and technical skills upgraded
• Team Work (communicate and synchronize with peers)
• Stress Resistance (able to keep calm and professional attitude in under pressure situations)
• Adaptation capacity (be able to adapt to the different customers' environments met during missions)
• Coaching (be able to coach trainees and help peers)

Security

• In-depth knowledge of IT security practices, including identity and access management, vulnerability management, network and operating system security, and application security
• Competence in cryptography and data security
• Knowledge of information security standards and regulations
• Experience in detecting and responding to information security incidents, including compliance management and conducting information security audits

Back-up
Other CSIRT Engineers junior / confirmed / senior / Team leader

Thales, entreprise Handi-Engagée, reconnait tous les talents. La diversité est notre meilleur atout. Postulez et rejoignez nous