Senior ICT Security Testing Specialist

We are looking for a Senior ICT Security Testing Specialist for a key client based in Strasbourg, France .

Main tasks

• Define security standards, policies, procedures, and baseline configurations for systems, applications, and networks.
• Conduct vulnerability assessments, technical security audits, and configuration reviews.
• Perform penetration testing (Black, Grey, and White Box), ethical hacking, and source code reviews.
• Design security architectures and implement technical security controls and solutions.
• Perform security monitoring and log analysis, identify weaknesses, and recommend corrective actions.
• Perform IT security audits and assessments.

Requirements:

Education & experience

• Minimum 4 years of relevant education (master or equivalent) after the secondary school.
• Minimum 6 years of relevant professional experience in IT Security .

Technical skills & expertise

• Cybersecurity Standards & Best Practices: ISO 27001, NIST, SANS Top 20, OWASP, and secure software development standards.
• System & Network Security: Secure configuration of servers, network devices, applications, Unix/Windows OS, and middleware; Linux administration, TCP/IP, networking protocols, application communications, network security and analysis tools; security configuration reviews of IT infrastructure, security devices, operating systems, and databases.
• Penetration Testing, Security Auditing & Assessments: Knowledge of IT security auditing and assessments; network and web application penetration testing, vulnerability assessments, security code reviews, and forensic image collection and analysis.
• Security Operations & Threat Intelligence: Security monitoring, threat detection, incident response, cyber threat hunting (proactive identification and isolation of advanced threats across networks and applications), and security operations engineering (defensive measures and threat intelligence production).
• Security Technologies & Tools: Experience managing and deploying firewalls, IDS/IPS, SIEM, IAM, APT detection, DLP, vulnerability analysis and mitigation (VA), PKI, virtual environments, endpoint and mobile security, encryption, remote access, backup and disaster recovery, patch management, and wireless protocols and services.

Certifications

At least one certification among:

• Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP);
• Certified Information Security Manager (CISM);
• Certified Information Systems Auditor (CISA);
• OSCP, OSCE, GPEN, CEH, CCNA, CCNP.

Language

• English (B2)

Location & work modality

• Strasbourg, France (Hybrid): Approximately 90% on-site and 10% near-site .
• Candidates must be based within a maximum 2-hour drive of the client's office in Strasbourg.