Our client, a leading IT service provider, is requiring a Security Consultant to be based at their end client site in Luxembourg.

• Propose a methodology for dealing with IT Security requirements in projects and interconnections with external parties, based on existing EC security rules or well-known security frameworks as CIS or NIST
• Describe and document general security requirements as part of the design of the new IT infrastructure, and CMS, and propose adequate security solutions
• Perform 'Business Impact Assessments', in collaboration with the relevant stakeholders, in particular the business owners and system owners and define the IT security needs which guarantee the required security of the IT systems;
• Within the project team, undertake an active role in the Member State connection project, gathering business requirements from the counter parties and elaborating the security requirements and measures to implement secure connections, in line with internal and national standards;
• Coordinate the implementation of the secure connections, participating in drafting the test plan and performing testing, namely security testing, reporting and auditing;
• Define the required protocols and procedures to maintain and manage the secure connections;
• Define the security requirements and propose measures and solutions to implement security by design for automated data exchanges;
• Identify applicable security hardening guidelines specific to various technologies and adjust them to context and needs; in collaboration with other technical experts implement the security controls;
• Describe and implement security specifications for various IT systems - infrastructure, network, OS, middleware, front end and backend applications, on premises or cloud based applications - in close collaboration with the solution architect

• Knowledge of security principles, internationally recognised standards and implementing security management methodologies and tools;
• Knowledge in telecommunication, datacentre and network security;
• Knowledge of risk assessment methodologies;
• Knowledge of ITIL best practices in ICT operations;
• Knowledge of ICT infrastructure and systems;
• Knowledge of security monitoring systems;
• Capability to write clear and structured technical documents;

• Proven experience of working as a member of an ICT project team
• Proven knowledge or certification on security standards ISO27001 level Practitioner or Expert ;
• Certifications in security areas as CISSP, CISSP-ISSAP, CISSP-ISSEP, CISM, CEH, ECSS, s-EHP, S-CITSO or similar;
• Network design security solutions/technologies, including security zones, secure connections, VPN, IPS, IDS, network and application firewall;
• Data security in virtualised environment, with encryption technologies and other security controls;
• Server hardening and monitoring - VMs, OS (Windows 2012, 2019, RedHat Linux), AD Policy groups, Windows 10, SQL hardening;
• Security best practices for IBM components (Case Manager, BAW, Filenet) and Java based applications.

Expertise in the following domains would be an asset:

• Security Information Architecture knowledge proven by certification TOGAF9-Foundation;
• Vendor specific certifications of level professional/expert from Cisco/Microsoft/IBM/RedHat/Checkpoint;
• Experience with security measures in an Agile development environment;
• Security technologies and solutions for containers (Dockers, Kubernetes);
• SIEM solutions for centralized logging and monitoring;
• OWASP implementation and assessment of code security.
• Working language is English. A very good command of the English language is mandatory.

Contract paying up to €480 per day freelance depending on experience.

Networkers acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers and is part of Gattaca Plc.

Gattaca Plc provides support services to Networkers and may assist with processing your application.