Infrastructure Security Analyst

What you’ll be doing & where

Where are you?

Welcome to your future team. As Infrastructure Security Analyst (employee or contractor) you will become an indispensable link in the Security Team headed by Cedomir Karlicic, that belongs to our Information & Security division headed by Stijn Meeuws.

What you’ll be doing

The Infrastructure Security Analyst will provide specialist support within the security team for all matters relating to the monitoring, detecting, and reporting of cyber security related events coming from Isabel’s networks, our partners, and customers. This position will serve as an advisory role in matters of cyber security to the organization and will have a supporting role in the development, issuance and maintenance of the detailed security strategies and policies. The Infrastructure Security Analyst will support incident handling activities throughout the incident response and forensic analysis process (handling compromised machines and/or supporting HR/Ethics/Legal cases). The Infrastructure Security Analyst will be responsible for successfully leveraging security data from internal (logs, firewalls, hosts, etc.) and external (Industry portals, mailing lists, newsgroups, etc.) sources in an effort to implement effective mitigations to protect Isabel’s network perimeter.

The Security Analyst’s core responsibilities include, but are not limited to:

• Provide specialist support for monitoring, detecting, and reporting of security related events coming from a large variety of sensors.
• Ensure 24/7 security event analysis activities.
• Perform technical coordination internally and externally as required.
• Provide technical support to forensic investigations.
• Develop and maintain customized sensor and correlation filters and signatures to address Isabel-specific threats and vulnerabilities.
• Monitor all detection capabilities to ensure their expected performance.
• Conduct and direct technical aspects of trend and threat analysis to optimize Isabel’s sensors and to propose modifications to audit policies.
• Provide technical expertise on the operational processes of the different areas of cyber security.

This is how you appear in our dreams

This position requires an understanding of networking, cloud, system administration, architectures, and security elements to include firewalls, intrusion detection systems, routers and proxies. This position requires the ability to work independently and in collaboration with rest of the SecOps team. The Infrastructure Security Analyst is also required to produce cohesive technical intelligence reports and an ability to adhere to the highest standards of ethics and professional conduct are an absolute must.

Education:

• Educated to degree level with a specialization in information security or information technology or have relevant experience in the domain.
• Proven information security background with at least 5 years’ experience in a similar role.

Generic skills required are:

• Fluency in English AND Dutch or French
• Strong communication skills - both written and verbal
• Ability to work independently and work well under pressure

Technical skills required are:

• Deep understanding of information security tools and processes
• Experience with network equipment, routers, switches, firewalls (at least one of the following: Palo Alto, Cisco, Checkpoint)
• Hands-on knowledge of cloud security of one of AWS, Azure, or GCP, and security of MS 365 (including MS 365 Defender)
• SIEM use cases development in Splunk ES, Elastic Search, Azure Sentinel, or ArcSight
• Good understanding of networking, system administration, architectures, and security elements
• System security (Linux or Windows)
• Experience with host and network-based forensics.
• Programming/scripting experience (Python, PowerShell, Golang, …)
• Technical knowledge in network security products, cryptographic suites

Desired Skills:

• Experience working in SOC
• System and Network Vulnerability Assessment
• Automation of security monitoring and response (e.g. Phantom, Cortex, …)
• Experience working in DevOps environment (Ansible, Terraform, Gitlab runners, Vault, Harbor)
• Secure Development Life Cycle knowledge and code review tools like Fortify, …
• Setting web proxy policies/configurations (e.g. Palo Alto, Bluecoat, F5 …)
• Physical/Data Link Layer, Dynamic routing (BGP, MPLS…)
• Enterprise DNS management (Infoblox)
• Knowledge of Kubernetes and Docker

What kind of company would you be joining?

Our ultimate goal is to set our customers up for success. They count on us to exchange and process documents, payments and identities in a secure way.

You will like our ambition. Isabel Group is a renowned company, counting more than 25 years of fruitful experience and +350 dedicated people. We are Belgium’s biggest fintech player, delivering software services to more than 2000 European banks, 90.000 companies, more than 3600 accountancy offices and 3.9 million people. And we keep growing.

Our constant focus on innovation is fueled by our passion. Keeping it simple results in delighted customers and our co-workers are offered a safe space to speak their mind and challenge the status quo.

You absolutely deserve this

• Flex Income Plan: you have a say in your salary package; you choose the benefits that suit you best
• Laptop, phone and subscription, group and health insurance, meal vouchers
• An annual corporate bonus
• By bus, electric car or bike; we fix the right compensation
• We’d love to see you at least one day in the office. You don’t want to miss fresh fruit and chair massages, do you? That – and more – is our IsaFun!
• We invest in your personal growth by training and coaching
• You work with experienced (fin)tech leaders and solid software tools
• A certified Top Employer bringing together hundreds of driven colleagues