CRI Group

Description
The primary objective of this service is to act as the first line of response regarding the potentialoccurrence of a cyber attack or security incident. Supported by several automated tools such asintrusion detection systems, log correlation engines and SIEM, ticketing system, alerts and warningfrom internal and external sources, this service involves receiving, triaging and responding toalerts, requests and reports, and analysing events and potential incidents and to provide theprimary support for incident responders. Triage involves assessing whether a security incident orthe level of exposure of a vulnerability is a true or false positive, tagging the vulnerability or incidentwith an initial severity classification and to activate the corresponding incident response playbookentry. Another objective of this service is to follow pre-defined procedures to perform technicaltasks related to identity and access management.
Tasks
 Real-time monitoring of cyber defence and intrusion detection systems Automatic-based processing (centralisation, filtering and correlation) of security events Human-based analysis of automatically correlated events Processing of incoming warnings, alerts and reports Triage based on verification, level of exposure and impact assessment Categorize events, incidents and vulnerabilities based on relevance, exposure and impact Open tickets and ensure case management Activate initial response plan based on standard playbook entries Maintain incident response address book Provide support to incident responders Advise affected users on appropriate course of action Monitor open tickets for incidents/vulnerabilities from start to resolution Escalate unresolved problems to higher levels of support, including the incident responseand vulnerability mitigation teams Configure the SIEM components for an optimal performance Improve correlation rules to ensure that the monitoring policy allows an efficient detection ofpotential incidents. For a new component to be monitored, this encompasses Analysing risks and security policy requirements Translating them into technical events targeting the system components Identifying the required logs/files/artefacts to collect from the monitored system and,if necessary, possible complementary devices to deploy Elaborating the relevant detection and correlation rules Implementing these rules in the SIEM infrastructure Configuring and tuning cyber-defense solutions Reviewing and improving the monitoring policy on a regular basis Integrate cyber-defence solutions for efficient detection Define dashboards and reports for reporting on KPIs. Produce qualified reports (including recommendations) or alerts to SOC customers and follow-up on actions Contribute to the design of the overall monitoring architecture, in close relationship with the customers/system owners, on the one hand, and the security operations engineering team, on the other hand, by performing the following tasks: Assessment of security events detection solutions, development of solutions; Integration of these solutions within the security monitoring scheme (log collection architecture, interoperability, formats, network aspects, …); Deployment and validation of the solutions; Draft documentation such as architecture design descriptions, assessment reports,configuration guides, security operating procedures Produce and maintain accurate and up-to-date technical documentation, includingprocesses and procedures (so called playbook), related to security incidents and preventivemaintenance procedures Management of identities and its related user accounts Management of groups, roles and other means of authorization Solve incidents, requests and problem tickets from 1st Level Support or internal customersrelated to identity and access management Maintain accurate documentation During security incidents, implement detection means to monitor attacker activities in realtime Integrate IOCs in security solutions Take an active part in developing and improving the maturity framework, and have it understood and implemented by the team, by:
<ul>
<li>Designing and drafting SOC processes and procedures framework</li>
<li>Implementing SOC processes and procedures, deploy collaborative tools and dashboards</li>
<li>Coaching/training the team on the processes, procedures and tools</li>
<li>Regularly auditing and reporting on maturity to the management</li>
<li>Reviewing and improving the framework</li>
</ul>
 Provide activity reports to management to demonstrate service SLA and service quality
Key Requirements:
At least 1 certification among: GPEN (GIAC Certified Penetration Tester) GCED (GIAC Certified Entreprise Defender) GPPA (GIAC Certified Perimeter ProtectionAnalyst) GCFE (GIAC Certified Forensic Examiner) GCFA (GIAC Certified Forensic Analyst) GNFA (GIAC Certified Network Forensic Analyst) CFCE (IACIS Certified Forensic ComputerExaminer) CCFP (Certified Cyber Forensics Professional) SCMO (SABSA Certified Security Operations &amp;Service Management Specialist) or an equivalent certification rec-ognized internationally (subject to acceptance as a valid-credential by the Contracting EU-I)
<ul>
<li>Networking (TCP/IP, SNMP, DNS, Syslog-ng, etc.)</li>
<li>Strong knowledge in the security analysis of firewall,proxy,and IDS logs</li>
<li>Strong knowledge in the security analysis of Applicableor Middleware logs (Oracle, Apache, Weblogic)</li>
<li>SIEM (Arcsight ESM 6.x, Q-RADAR, or equivalent -subject to acceptance by the contracting EU-I)</li>
<li>Log management solution (Arcsight Loggers and/or QRADARand/or Splunk or equivalent - subject toacceptance of the contracting EU-I))</li>
</ul>

Desirable skills
<ul>
<li>STIX (Structured Threat Information Expression) with aparticular focus on the following related standards:• CybOX (Cyber Observables)• CAPEC (Attack Patterns)• MAEC (Malware)TAXII (Threat Information Exchange)</li>
<li>Experience in using, configuring and tuning a SIEM</li>
<li>Knowledge in network security solution/technologieso Firewalls;o Network IDS and IPS;o Switches and routerso APT detection solutions such asFireEye;o DNS, DHCP, VPN, …o Network forensics (full packet capture)o Traffic baselining analysis</li>
<li>Knowledge in Host based security solutionso HIPS;o Malware end-point protectiono OS logs</li>
<li>Strong knowledge in Windows security events analysis</li>
<li>Writing and optimizing IDS signatures (preferablySNORT and/or SURICATA)</li>
<li>Writing and optimizing YARA rules</li>
<li>SNORT or SourceFire NGIPS, FireSIGHT,</li>
<li>Suricata/StamusNetworks</li>
<li>ELK (ElasticSearch, Logstash &amp; Kibana)</li>
<li>FireEye Ex, Nx, Ax, Fx, Hx, Ix</li>
<li>CheckPoint and Juniper Firewalls</li>
<li>BlueCoat proxies</li>
</ul>
The following documents / procedures will be requested to successfully complete the hiring process :
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: www.cri-group.eu

Luxembourg

Security Operations Centre Analyst

NRB Group

We are looking for an IT Senior Consultant for one of our client at the European Institutions.  
Main responsibilities of the role: 
<ul><li> Manage third-party security providers and tools to ensure timely delivery and high quality security services (web filtering, SOC activities, security incident management, penetration testing, vulnerability management, vulnerability remediation, patching, phishing exercises, password management solutions etc.,);</li><li> Advise the internal IT security and Strategy team on security best practices, including MS365, and MS Azure security solutions, configuration and operations;</li><li> Develop or review security-related documentation such as policies, processes or procedures to ensure clarity, consistency and alignment with best security practices and propose improvements as applicable,</li><li>Provide a general QA function and ‘point of challenge’ on the quality of documents,</li><li> Analyse and comply with data protection and data privacy requirements, and determine how to balance these requirements with functional requirements</li><li> Confidently follow up on deliverables with internal and external parties with expected results;</li><li>Develop or review material to support the creation or the improvement of various security requirements, plans and test cases;</li><li> Contribute to the success of daily tasks, such as incident management, user request management (security assessment of new software, spam/phishing analyses);</li><li>Monitor a variety of security sources to identify and assess new or emerging threats and risks to the IT systems, processes and staff;</li><li> Prepare draft IT security assessments in the context of data location framework reviews;</li></ul>


<h3>Requirements</h3>
<ul><li>Advanced degree in relevant field is required (Computer Science, IT Security), with at least 6 years of relevant experience</li><li>Solid understanding of the current IT security threat landscape and countermeasures</li><li>Extensive knowledge of contemporary IT security concepts, solutions and tools</li><li>Experience in data protection and data privacy considerations in implementing various IT or IT security solutions</li><li>Extensive knowledge of cloud security, M365 security, multi-factor authentication approaches, threat and vulnerability management, deception, and/or threat intelligence technologies</li><li>Extensive knowledge of and experience with computer systems administration, computer networks, virtualisation technologies, programming</li><li>Service delivery management experience (vendor management, reporting, relationship management, etc.) at a relatively senior level</li><li>Experience with MS365 security administration, MS Azure tools management and hardening</li><li>Good understanding of MS security landscape</li><li>Project management experience</li><li>Experience in internal control framework documentation reviews and attestations</li><li>Experience in conducting failover tests of data centres</li><li>Experience in conducting cyber exercise simulations or updating cyber incident response plans</li><li>Experience in or ability to provide inputs in testing security tools with test users, including drafting the related communications</li><li>Ability to independently undertake assigned tasks or manage smaller projects with minimal supervisory involvement.</li><li>Very good communication skills in English, both oral and written, other language skills are desirable.</li><li>Good presentation writing skills</li></ul>

Luxemburg

IT Security Expert

Location: Luxembourg
Work model: On-site
Your mission:
-  You will work closely with the team leader to coordinate and manage security tasks with multiple internal teams and external partners.-  You will work on and support SIEM log source onboarding and troubleshooting activities.-  You will work on planning and creating Firewall requests for traffic flows.-  You will support the team leader to create and maintain documentation and processes.-  You will work on reporting on the tasks and activities.-  You will be a team player, willing to help and learn. Your profile:
-  You have knowledge of security standards, infrastructure architectures (firewall, web application firewall, networking, Active Directory, etc.).-  You have experience in operational security management, and you have basic knowledge of security monitoring and reporting tools (QRadar, Qualys, etc).-  You have a very good organizational capacity for the daily processing of activities.-  You are a team player by hart.-  You have a spirit of synthesis, analysis and pragmatism. Collaboration, adaptability and communication are essential concepts for you.-  You are dynamic and voluntary.-  You have rigor in your work.-  You are willing to learn and develop your competencies.-  You have fluency of French and English
The following documents / procedures will be requested to successfully complete the hiring process :
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

IT Security Support Engineer

Location: Luxembourg
Work model: On-site
- Experience as SOC analyst - Experience with the organizational design of a SOC and development of SOC architecture and processes - Experience with SIEM tools (such as RSA, Arcsight, Splunk and QRadar) and other tools used by the SOC team like anti-Virus/Malware, anti-DDOS, WAF, FW Rules Management, forensic tools, service management tooling- Excellent Knowledge and experience in IT Security Technologies- Background in Vulnerability Management, Security Incident Management, Forensic Analysis- Experience with the definition of use cases and implementation of the use cases on a SIEM tool- You are a team player and appreciate teamwork. You have good relational skills.- Ability to work in an international context and excellent communication skills- Interpersonal skills with the ability to establish and working relationships in a project-based / client-serving model, and to work closely with people at different levels of an organization- English is a mandatory language requirement Preferred Professional and Technical Expertise : 
- At least 3 years of experience in security consultancy (SOC)- At least 6 years of experience in IT  Security domain- Security certifications would be an advantage.
The following documents / procedures will be requested to successfully complete the hiring process :
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

SOC Analyst

Location: Luxembourg
Work model: On-site
Role overview:
- Oversee and support the development of vulnerability managementprograms, initiatives, integration, and technical assessment- Direct and/or perform on-going vulnerability assessments on applications andnetworks and systems. Direct assessment efforts in a prioritized fashion,seeking breadth and depth of coverage where appropriate- Partner with teams who implement technology and achieve methods foraligning to their processes and reduce vulnerabilities- Enhance technology and/or process to ensure accurate and up to dateinventory of critical infrastructure and applications are in place
Core Responsibilities:
- Drive the on-going implementation and operation of Vulnerability management program- Plan and carry out vulnerability scan campaigns. Create reports and presentto client with factual documentation of issues identified and clearrecommendation for mitigation of found vulnerabilities- Assess, document and validate the vulnerability management practicesacross business to ensure compliance to company policy and standards aremet- Assess possible risks to proposed changes to the environment, and if neededrecommend alternative solution, or mitigating security controls
Required Technical and Professional Expertise :Knowledge and Experience:
- Minimum 3 years Information Security experience, focused on risk analysis,identification, and vulnerability assessment. Degree in Computer Science or arelated field is desirable- Understanding of Security and Infrastructure Architecture/Technologies:including but not limited to Routers, Firewalls, IDS, PKI, VPN, Application Security, Vulnerability Scanners, Windows and Unix Systems Security.
Skills:
- Results oriented cross-functional leadership success partnering with internaland external stakeholders- Outstanding written, verbal, and presentation communications skills.- Executional excellence – consistently deliver programs to successfuloutcomes in a fast moving environment- Excellent interpersonal communication, project management and leadershipskills. Must be able to communicate effectively and tactfully with all levels ofpersonnel (in person, on the telephone and through written communication). Unwavering passion, commitment, and persistence to the business,customers and technology- English – working proficiency
The following documents / procedures will be requested to successfully complete the hiring process :
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

Vulnerability Management Specialist

Apply to Cyber Security Jobs in Luxembourg in companies remotely and near you. New Cyber Security Jobs in Luxembourg added daily.

Job Position and Company	Location	Tags	Posted
Security Operations Centre Analyst at CRI Group	Full Time Forensic Analyst Incident Response GCFA
IT Security Expert at NRB Group	Full Time Consultant Incident Response
IT Security Support Engineer at CRI Group	Full Time
SOC Analyst at CRI Group	Full Time Forensic Soc Analyst Analyst
Vulnerability Management Specialist at CRI Group	Full Time Application Security Windows

Cyber Security Jobs in Luxembourg

0 Cyber Security Jobs in Luxembourg. Page 1 of 1

5 closed cyber security jobs in luxembourg:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Luxembourg

0 Cyber Security Jobs in Luxembourg. Page 1 of 1

5 closed cyber security jobs in luxembourg:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter