CRI Group

Tasks: 
<ul>
<li>Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems</li>
<li>Develop and validate baseline security configurations for operating systems, applications, and networking and telecommunications equipment</li>
<li>Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommend remedial action</li>
<li>Perform source code reviews</li>
<li>Perform network and application penetration testing ( Black box, Grey box and White box)</li>
<li>Defining detailed security architecture</li>
<li>Performing technical security audits</li>
<li>Perform log analysis and security monitoring</li>
<li>Perform IT infrastructure/ Application Security configuration reviews</li>
<li>Design and implement technical security mechanisms and technologies</li>
<li>Design and develop technical security standards and procedures</li>
</ul>
Tasks in more details:
<ol>
<li>Security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, system security appliances, and host‐based security systems</li>
<li>Plan, coordinate, and perform programming for all security systems and other IT integrated components to meet eu‐LISA and system operational needs</li>
<li>Review of design physical security systems installed as to meet eu‐LISA needs according to best industry practice and Agency guidelines</li>
<li>Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommend remedial action.</li>
<li>Determine material quantities in the amounts needed to complete projects as per the first Agency planning for the current Building Project</li>
<li>Develop and create systems documentation, including full review and correction of systems drawings, systems installation drawings, and other systems documentation</li>
<li>Ensure that physical security systems are being installed, programmed, tested, and commissioned according to Agency needs and best practice standards</li>
<li>Ensure that physical security systems are being properly maintained, reprogrammed, retested, and repaired according to Agency needs and best practice standards</li>
<li>Performing technical and security audits as to ensure optimal security systems’ performance</li>
<li>Security monitoring and log analysis</li>
<li>Review of design of the GTC / Facility system connections to the Hypervision system as to allow effective monitoring of the well‐being of the Data center and all related equipment in order meet the business continuity needs and the best standards</li>
<li>Design and implement technical security mechanisms and technologies</li>
<li>Design and develop technical security standards and procedures.</li>
<li>Attend dedicated and administrator trainings as to master the security systems. Such would require the CCTV System training / Access System Training / Hypervision System training / Fire detection and extinguishing system and all related trainings (Facility system included) as to perform the works required</li>
<li>Develop and perform effective security systems training sessions for relevant staff, notably the Physical Security Coordinators and the Guarding Force.</li>
<li>Performing any other activity related to the security and management of the IT corporate infrastructure or other systems under eu‐LISA’s responsibility.</li>
</ol>
Education requirements:
<ul>
<li>Minimum 4 years of relevant education (master or equivalent) after the secondary</li>
</ul>
Minimum experience requirements:
<ul>
<li>Minimum 6 years of relevant professional experience in IT Security</li>
</ul>
Additional needed qualification, knowledge and skills: 
Expected to possess advanced knowledge of/in:
<ul>
<li>Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.)</li>
<li>Good practice in the secure configuration of servers, network devices and applications</li>
<li>Networking protocols and application communications</li>
<li>Network analysis tools</li>
<li>Securing Unix and Windows operating systems</li>
<li>Securing middleware and applications.</li>
<li>Network penetration testing</li>
<li>Web application penetration testing</li>
<li>Vulnerability assessments</li>
<li>Forensic image collection and analysis</li>
<li>Managing/deploying the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services</li>
<li>Open Web Application Security Protocol (OWASP) and secure software development standards</li>
<li>Performing security code reviews.</li>
<li>Security monitoring, threat detection and incident response;</li>
<li>Proactively and iteratively searching through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);</li>
<li>Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);</li>
<li>Linux administration, TCP/IP, Network Security.</li>
<li>Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.Expected to possess one or more of the following qualifications:
<ul>
<li>Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP)</li>
<li>Certified Information Security Manager (CISM)</li>
<li>Certified Information Systems Auditor (CISA)</li>
<li>OSCP, OSCE, GPEN, CEH, CCNA, CCNP</li>
</ul>
</li>
</ul>
Security clearance requirements: 
<ul>
<li>EU Secret</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

Strasbourg

IT Security Specialist

Amazon.com

Job summaryThe AWS Industry Products Organization is chartered to build new, general availability software for Supply Chain, Automotive, Energy, Sustainability and Manufacturing industries. We apply Amazon’s innovation mechanisms alongside with external customers, outcome-drive engineering mechanisms, and AWS digital technologies to produce outcomes that address real world industry problems. We dive deep with industry leaders to solve problems and unblock large industry players, enabling them to capitalize on new digital business models. We are looking to build a team of security engineering professionals that can guide software engineers, solution architects, and product managers within Amazon and its external partners to achieve our mission. A day in the lifeIn this role, you will: conduct proactive vulnerability assessments perform penetration testing, both white box and black box  provide mitigations and validate solutions for findings originating from assessments  facilitate security reviews, act as a lesion between engineering and security organizations to define threat models and mitigate them  evaluate and recommend new security tooling and technologies, automate defense and offensive security for the organization  develop, interpret, and implement security policies and procedures to ensure general security awareness  … and much more! Note: While the majority of our team is based in the Seattle, WA areas, by applying to this position your application will be considered for all locations we hire for in the United States, including but not limited to: Seattle, Austin, New York, Arlington and Bay Area.<h3>Basic Qualifications</h3> Bachelor’s degree in Computer Science, Electrical Engineering and Computer Science, or 3+ years relevant work experience in any of application security, security engineering, working closely with development teams to deliver commercial software, services or hardware devices 3+ year of experience with the application of threat modeling or other risk identification techniques Experience with security engineering, system and network security, authentication and security protocols, cryptography, and application security Experience with the application of threat modeling or other risk identification techniques Software development experience in Java, C, and C++. Experience with scripting languages such as Python, Perl, or Ruby<h3>Preferred Qualifications</h3> Master’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent Experience with hardware security, system and network security, authentication and security protocols, cryptography, and application security 3+ year of development experience in C, C++, and/or assembly (x86, x86-64, ARM) Knowledge of common wireless connectivity protocols (e.g., Bluetooth, WiFi, 802.15.4) Knowledge of hardware security mechanisms, including secure boot, trusted execution environments Knowledge of operating system internals, with emphasis on Linux and common RTOS environments Familiarity with system security vulnerabilities and remediation techniques, including penetration testing and the development of exploitsAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Austin

Security Engineer, AWS Industry products

Yugabyte

At Yugabyte, we are on a mission to build the default database for cloud native applications in a multi cloud world. We are well underway on this journey with YugabyteDB, the open source, high-performance, distributed SQL database that runs on any cloud and enables developers to get instantly productive using well-known APIs. And the best is yet to come! We are looking for talented and driven people to join us on our ambitious mission and help us build a lasting and impactful company.We are looking for a security engineer assurance who is passionate about cybersecurity and enjoys working  in a fast-paced startup environment, and who has a strong desire to learn new technologies.The Security Engineer manages the vulnerability management program and tooling, performs security assessments and leads major security initiatives: Web Application Security, Least-privilege principle, Secrets Management, Key Management, PKI and Certificate Management, Anti-fraud protection. Responsibilities also include incident response and root cause analysis
<h3>Responsibilities:</h3>
<ul>
<li>Manage security tools(Snyk, Fossa, Trivy)</li><li>Manage vulnerability programs. Triage vulnerabilities, assign priorities and owners, follow up on the mitigation </li><li>Monitor license violations.  </li><li>Perform Security Assessments and Threat Modeling</li><li>Security Incident Response. Be part of security-on-call team in PagerDuty, act as incident commander, perform Root Cause Analysis </li><li>Drive security initiatives(Web Application Security, Least-privilege principle, Secrets Management, Key Management, PKI and Certificate Management, Anti-fraud protection)</li><li>Given our fast pace and startup nature, things change over time and your job responsibilities will too.</li></ul>
<h3>Requirements:</h3>
<ul>
<li>BS/MS degree</li><li>Web application security experience</li><li>Familiarity with a modern SaaS infrastructure and application development</li><li>Manual and/or automated Penetration Testing (white box, black box &amp; gray box)</li><li>Experience in scripting languages(BASH, Python, JS, etc) </li><li>Good understanding of security risk(OWASP Top 10)</li><li>Nice-to-have: CEH, CSSLP, GIAC, OSCP, OSCE, or other related industry recognized certifications </li><li>Familiarity with major security protocols </li><li>Collaboration, transparency and integrity</li></ul>Interview Process: Health and safety remain a top priority for all of our roles. As such, all Yugabyte interviews are held virtually, so we can all continue doing our part with social distancing and containment efforts. Although we are based in Silicon Valley, we hire exceptional folks wherever they are! Our process usually lasts 2-3 weeks, and consists of a phone screen, Zoom interviews including senior leaders.Our Benefits: Remote workCompetitive SalaryFull Health BenefitsMonthly Wellness ReimbursementInternet and Phone ReimbursementHome Office Setup ReimbursementEqual Employment Opportunity Statement:As an equal opportunity employer, Yugabyte is committed to a diverse workforce. Employment decisions regarding recruitment and selection will be made without discrimination based on race, color, religion, national origin, gender, age, sexual orientation, physical or mental disability, genetic information or characteristic, gender identity and expression, veteran status, or other non-job related characteristics or other prohibited grounds specified in applicable federal, state and local laws.#LI-Remote

United States

Security Engineer, Assurance

Xtremax

We are looking for experienced security professionals who can help our clients achieve a secured environment for their applications and web information. You must have strong experience in performing penetration testing and vulnerability management services for applications, network systems, operating systems and databases. Candidates should have experience with black box, grey box, and white box testing. Selected candidates will work on a whole-of-government platform that hosts close to 500 web applications.Responsibilities <ul><li>Conduct security assessments such as penetration and vulnerability tests </li></ul><ul> <li>Keep updated on knowledge of the IT security industry: including awareness of new or revised security solutions, security standards, trends / best practices, offensive techniques and tools </li> <li>Perform Blackbox/Graybox testing of Web/Mobile/Thick client applications </li> <li>Perform Network Vulnerability Assessments and Penetration Testing </li> <li>Risk Evaluation of observed vulnerabilities based on common risk scoring techniques such as CVSS </li> <li>Knowledge-share with team on techniques and results </li> </ul><ul> <li>Create detailed report of findings and recommendations after testing is complete and present to stakeholders </li> <li>Coordinate with developers/stakeholders on the findings for appropriate fixes </li> <li>Stay up-to-date in current tools, techniques, and vulnerabilities to incorporate into testing practices</li> </ul>Requirements<ul> <li>Minimum 3 years experience in specifically Security Testing function</li> <li>Degree in Computer Science / IT Security or other related disciplines</li> <li>Should be OSCP or CREST CRT Certified</li> <li>Minimum 3 years experience in Security Testing</li> <li>Should have an overall exposure and understanding of Application and Network Security testing</li> </ul><ul> <li>Strong knowledge of the OWASP Top 10, OWASP Mobile Top 10, SANS top 25. Detailed knowledge of common web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Insecure Direct Object reference, Click jacking, buffer overflows, etc.</li> <li>Experience in manual application penetration testing of web- based applications, thick- client applications, mobile applications, web services, API s etc.</li> <li>Experience in Source Code Review of applications</li> <li>Experience in manual mobile application penetration testing on platforms like Android, IOS, etc both client and server side applications.</li> <li>Should have knowledge on Risk Rating Standards like DREAD, CVSS etc.</li> </ul><ul> <li>Experience in automated web application vulnerability scanners (e.g. Web inspect, Burp suite Pro, etc)</li> <li>Should have performed Black Box / Grey Box Application penetration testing.</li> <li>Good understanding of application protocols such as HTTP, SAML, OAUTH, OpenID Connect, etc.</li> <li>Good understanding of network technologies and protocols such as NIPS, IDS, TLS/SSL, DLP, firewalls, WAF, DNS and other common technologies and protocols.</li> <li>Experience in performing Network Penetration Testing for both internal and external networks.</li> </ul><ul> <li>Knowledge in end-to-end flow on executing application and network penetration testing</li> <li>Should be able to work as individual contributor or as team player wherever required </li> </ul>By submitting your resume/CV, you consent and agree to allow the information provided to be used and processed by or on behalf of Xtremax Pte Ltd for purposes related to your registration of interest in current or future employment with us and for the processing of your application for employment.You also represent to us that you have obtained the consent of your referees when you disclose to us their personal data for the purpose of conducting reference checks.The personal data held by us relating to your application will be kept strictly confidential and in accordance with the PDPA. You may also refer to our Privacy Policy for more details here: <a href="https://www.xtremax.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.xtremax.com/privacy-policy</a>We regret to inform you that should you not consent to providing the necessary data required for us to process your application, your application will be considered void.

Singapore

IT Security Consultant

Apply to Black Box Cyber Security Jobs in companies remotely and near you. New Black Box Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
IT Security Specialist at CRI Group	Application Security APT Audits Black Box CEH
Security Engineer, AWS Industry products at Amazon.com	Application Security AWS Black Box C Cryptography
Security Engineer, Assurance at Yugabyte	Application Security BASH Black Box CEH GIAC
IT Security Consultant at Xtremax	Android Black Box Burp Suite Crest DNS

Black Box Cyber Security Jobs

0 Black Box Cyber Security Jobs. Page 1 of 1

4 closed black box cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Black Box Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Black Box Cyber Security Jobs

0 Black Box Cyber Security Jobs. Page 1 of 1

4 closed black box cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Black Box Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter