Data Quality Analyst - Security

Contexte

As part of an ongoing action plan to improve data quality across our application and infrastructure inventories and to improve coverage of our security tools, we are looking for support to carry out a dedicated taskforce on a subset of applications. The initial taskforce should last 3 months but may be extended if need be. Project to be started ASAP.

Missions

Objective 1: Improve the quality of the data maintained in the application inventory by identifying inconsistencies and working with Head of Application Lifecycle Management to resolve them

Deliverables:

• List of identified inconsistencies.
• Data quality metrics before and after remediation.

Objective 2: Ensure coverage of Internet-facing applications by the Web Application Firewall (WAF)

• WAF – Application inventory integration: collaborate with SOC teams to introduce a new WAF tag enabling the association of each URL with Application ID. Define governance and maintenance processes for this new attribute.
• Application mapping: perform a manual reconciliation of applications currently registered in the WAF. Engage Security Officers and Application Managers to assign App ID to applications that are currently unmapped.
• Coverage gap analysis: identify Internet-facing applications that are not protected by the WAF. Work with the relevant teams to assess eligibility and onboard those applications into the WAF.

Deliverables:

• Complete WAF-to-Application inventory mapping.
• List of applications requiring onboarding and associated action plan.

Objective 3: Ensure coverage of web applications by the vulnerability scanning tool

• Identification of uncovered applications: leverage existing reports to identify web applications that are not scanned by vulnerability scanner. Engage Security Officers and Application Managers to determine whether these applications are eligible for scanning or justifiably classified as non-applicable.
• Remediation: for eligible applications support application teams throughout the vulnerability scanning onboarding process.

Deliverables:

• Coverage list of scanned and non-scanned applications.
• Remediation plan for non-compliant applications.

Objective 4: Support Security Officer in ongoing initiative to improve CMDB data quality (focus on cybersecurity relevant attributes)

Deliverables:

• List of identified inconsistencies.
• Data quality metrics before and after remediation.

Compétences

• Microsoft Excel: Expert
• Power BI: Confirmé

1. Expert level in Microsoft Excel
2. Confirmed level in Power BI