Responsabilities:
• Provide operational cybersecurity support by implementing, configuring, maintaining, monitoring, troubleshooting, and upgrading security systems, services, products, and infrastructure to ensure their secure and reliable operation.
• Design, implement, and manage cybersecurity controls, security technologies, patches, and secure configurations while ensuring compliance with security requirements, change management procedures, and service level agreements (SLAs).
• Collaborate closely with IT teams, security architects, engineers, project managers, and other stakeholders to define security requirements, develop security solutions, and support the implementation of new security components and enhancements.
• Monitor security events, investigate incidents, assess vulnerabilities, recommend security improvements, and ensure the effectiveness and performance of cybersecurity measures.
• Create and maintain technical documentation, security standards, operational procedures, configuration records, and reporting related to the security and operation of systems and services.
• Provide cybersecurity expertise, guidance, and recommendations to support the design, deployment, and ongoing management of secure IT environments and security technologies.
Technical skills:
• Document, report present and communicate with various stakeholders
• Integrate cybersecurity solutions to the organisation’s infrastructure
• Configure solutions according to the organisation’s security policy
• Assess the security and performance of solutions
• Develop and test secure code and/or scripts
• Identify and troubleshoot cybersecurity-related issues
• Excellent communication skills
• Analytical mind, attention to details and an ability to pick things up quickly; problem solving skills
Profile :
• Knowledge of systems development life cycle
• Knowledge of operating systems security
• Knowledge of computer networks security
• Knowledge of security controls
• Knowledge of offensive and defensive security practices
• Knowledge of secure coding practices
• Possesses hands on experience in ICT in the role of Information Security Administrator / Specialist
• Knowledge of system security vulnerabilities, threats and exploit mechanisms, penetration testing, remediation techniques and risk analysis methodologies
• Knowledge of ISO 27000 family standards and SANS CIS critical security controls
• Knowledge of OWASP family standards
• Good knowledge of network protocols: SMTP, NTP, DNS, LDAP, DHCP, PKI/CA
• Practical knowledge of designing and performing security tests
• Practical knowledge of managing security functions within the Identity and Access Management solutions
• At least 3 certifications among:
o GCED (GIAC Certified Enterprise Defender)
o GPPA (GIAC Certified Perimeter Protection Analyst)
o GCWN (GIAC Certified Windows Security Administrator)
o GCUX (GIAC Certified UNIX Security Administrator)
o GCCC (GIAC Certified Critical Controls)
o SSCP ((ISC)2 Certified Systems Security Practitioner)
o CCSP (ISC2 Certified Cloud Security Professional)
o CISSP (Certified Information Systems Security Professional)
o CSSLP (ISC2 Certified Secure Software Lifecycle Professional)
o GSEC (GIAC Certified Security Essentials)
o ECSA (EC-Council Certified Security Analyst)
o SCPO (SABSA Certified Security Operations & Service Management Practitioner)
o ECSA (EC-Council Certified Security Analyst)
Why Cronos Group?
We’ll propose you:
• An attractive salary package
• A good work-life balance environment
• The assurance of working in cutting-edge technologies in an entrepreneurial spirit.
• The opportunity to develop your skills thanks to tailor-made training courses according to your needs
• A good job in a friendly place
If you wish to integrate a dynamic structure on a human scale while working with the latest technologies, don't wait anymore and join Cronos!
Skills Required
- Hands-on experience as an Information Security Administrator or Specialist
- Knowledge of systems development life cycle (SDLC)
- Knowledge of operating systems security
- Knowledge of computer networks security and network protocols (SMTP, NTP, DNS, LDAP, DHCP)
- Knowledge of PKI/CA and certificate management
- Knowledge of security controls, offensive and defensive security practices
- Knowledge of secure coding practices and ability to develop/test secure code or scripts
- Practical experience performing security tests, penetration testing, and vulnerability assessment
- Practical knowledge managing Identity and Access Management functions
- Knowledge of ISO 27000 family standards, SANS CIS Critical Security Controls, and OWASP guidance
- Excellent communication, analytical, attention to detail, and problem-solving skills
- At least 3 certifications from the listed security certifications (e.g., CISSP, SSCP, GSEC, GCED, etc.)
What We Do
Cronos Europa is an IT and digital communications company uniquely dedicated to serving the European institutions, agencies and bodies. From the European Union to EUROCONTROL, we partner with a range of supranational and interinstitutional authorities. Our mission is to arm them with the tools they need to thrive in the digital age. Every aspect of our organisation is designed to complement their capabilities - from our people to our processes and our premises. Our brand combines the expertise of former companies Cronos International and C-Dev, with the creative skills of Inspiiro and the breadth of capabilities of the Cronos Group. Today, Cronos Europa employs over 1,000 people in offices across Belgium, Luxembourg and the Netherlands, serving institutions across diverse framework contracts. Cronos Europa is part of the Cronos Group, one of the largest IT service providers in the Benelux, employing over 8,000 people across 200 competence centres. By leveraging the Group’s resources, Cronos Europa can help clients extract value from new and emerging technologies, for everything from Artificial intelligence to Zg Quantum. For spontaneous applications: https://cronoseuropa.breezy.hr/p/7a64ee973c6701-spontaneous-application?state=published
