Production Security Consultant

**Mission Description - Intervention Scope**
- **Manage the process of vulnerability management**:

- Control the results of the scan
- Create / Feed existing dashboards
- Follow up & monitor the remediation actions with the stakeholders and recommend prioritization according to SLA & the rules of the Group
- Prepare and provide the evidence for different audits and internal controls
- Propose & enhance the process in order to reduce the risk
- **Manage the process of hardening management**:

- Control the results of the scan
- Create / Feed existing dashboards
- Follow up & monitor the remediation actions with the stakeholders and recommend prioritization according to SLA & the rules of the Group
- Prepare and provide the evidence for different audits and internal controls
- Propose & enhance the process in order to reduce the risk
- **Manage the C-SIRT alerts** related to our scope and remediation according to the SLA of the Group
- Follow up & monitor the security indicators
- Participate in audits & internal/group controls
- Organize and follow up on the pentests
- Analyze the open firewall requests before implementation related to our scope in accordance with security rules provided by the Group
- Participate in the preparation of different presentation support for committee and steerco

**Technical Description of the Mission’s Environment** **Material**:
PC Laptop **Software**: Microsoft Office Suite, Power BI, Qualys, Trellix, Tanium, Nexpose

**Results Expected / Deliverables**
- Ensure proper communication and global notices to the stakeholders for both processes: vulnerability & hardening management
- Formalize the action plan on a monthly basis with the stakeholders for all vulnerabilities and gaps related to hardening
- Produce weekly and monthly reports which feed the different committees and steerco
- Produce the evidence required by the Group controls & audits
- Respond to the C-SIRT alerts in accordance with the SLA
- Approve/Reject the open firewall requests in accordance with the SLA
- Produce and control the security indicators
- Knowledge management: produce user guides and documents

VulnerabilityManagement #HardeningManagement #CSIRT #SecurityIndicators #Audits #Pentests #FirewallRequests #CyberSecurity #InformationSecurity #ISAE #NIST #Qualys #Tanium #Trellix #Nexpose #NetworkSegmentation #CyberArk #BlueTeam #SecurityMonitoring #AIX #RHEL #Windows #Oracle #Sybase #MSSQL #Websphere #Weblogic #Apache #Tomcat #Cisco #F5 #Checkpoint

'''html

**Pre-requisites**:
Please ensure that the following requirements are met for the job opening:

- ISAE / Information Security standards / NIST
- Qualys, Nexpose, Tanium, Trellix, Network segmentation, CyberArk
- Blue team: vulnerability management, hardening management, secure network, privilege access management, security monitoring
- AIX/RHEL/WINDOWS, ORACLE/SYBASE/MSSQL, Websphere/Weblogic/Apache/Tomcat, CISCO/F5/Checkpoint
- Languages: French / English

'''