11 Mar. 2022
Security Consultant (Medior Level)
Job description
- Higher education (Master or Bachelor) with business or technical/engineering background or equivalent through experience.
- Proven security expertise with advising on operational and tactical level. E.g. for supporting the CISO of the Flemish Government, ICT function holders, security consultants and policy makers with security oversight responsibility.
- Demonstrable expertise in specific knowledge domain of information security (e.g. implementing information security management processes, performing vulnerability analyses and pen testing, optimizing application security by cost-effective means, implementing Priviliged Access Management, implementing encryption solutions).
- Demonstrated experience in analyzing, optimizing and documenting security processes and governance, in particular those of the Flemish government (after an induction period)
- Demonstrated experience in both functional and technical environments in which the projects are situated.
- Minimum of 5 years relevant experience.
- Knowledge and experience through certificates depending on domain of expertise (e.g. CISM, CISSP, CEH).
- Ability to establish new and optimize existing business processes through knowledge of the security application domain, security strategies and goals of the client
- Trusted advisor with good communication skills, very customer oriented
- Develop and follow up vision, organization - business strategy and roadmap, within the identified business objectives
- Good knowledge of security management techniques and or frameworks (e.g. ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
- Able to transfer expert knowledge in this area
- Knowledge of specific security tooling for e.g. vulnerability analysis (e.g. Qualys, Nessus), pen testing (e.g. Metasploit), PAM (e.g. CyberArk), Encryption (e.g. Voltage).
- Knowledge of MS office such as e.g. Powerpoint and Excel.
Requirements
General networking (TCP/IP , DNS , HTTP / S , SMTP , FTP , Tunneling)
- Intrusion Prevention System
- Firewall and VPN
- SSL certificates
- Proxy
- Web application firewalls
- Vulnerability scanning and remediation
- Hacking Tools
- Security incident investigation
- Log even correlation and alerting systems
- Security minded and , ideally , already involved in the implementation of security standards
- Knowledge of Internet threats and countermeasures
Location
Brussel(s) / Bruxelles