Cybersecurity Engineer L2 + Linux
2 months ago
Langreo
Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world. No matter what moment of life we are in, w e are DIVERSE in age, gender, nationality, family… we have been c ertified in Diversity and as an ETHICAL company more than 9 years in a row!I t doesn't matter if you are living your growth stage in life, L EARNING and TRAINING at all hours or if you need to consolidate yourself and appreciate FLEXIBILITY, C ONCILIATION and tax and social BENEFITS to combine your personal and professional life. W hat really matters is that you can feel that you are WHERE YOU SHOULD BE to get the future you want. W hat will you do in the project? Cibersecurity Engineer L2 + linux experience. We are looking for a system admin engineer, with skills in Cybersecurity Operations Centre, proficient knowledge in administering Linux systems, preferably Red Hat Enterprise Linux (RHEL) and practical experience in Distributed File System (DFS), SIEM and EDR. His primary responsibility is to conduct advanced threat analysis, using detailed investigative and forensic techniques to understand the root cause and extent of incidents T o feel comfortable in the position, you need to be able to get along well with these knowledge and responsibilities: Distributed File System: QTrees and security groups creation along with assignment to SVMs, Shares, etc Advanced Analysis: Perform deeper and more detailed analysis of incidents, evaluating sophistication and potential impact compared to level 1. Specialized Escalation: Handle incidents of greater complexity, escalating to higher levels and coordinating with specialized teams when necessary. Forensic Investigation: Conduct forensic investigations to determine the root cause of incidents and collect evidence for possible legal action. Signature and Rule Development: Create and update signatures, rules, and behavioural profiles in detection tools to improve accuracy and effectiveness. Technical Advice: Provide technical advice to level 1 analysts, helping in the understanding and resolution of more complex incidents. Tool Optimization: Collaborate in the improvement and optimization of security tools, proposing adjustments and updates to keep up with threats. Critical Incident Management: Coordinate the response to critical incidents, ensuring efficient execution of mitigation and recovery plans. Review of Security Policies: Evaluate and update security policies and procedures, ensuring their alignment with best practices and regulations. Staff Training: Provide ongoing training to Tier 1 staff and other teams on new cybersecurity threats, tactics, and techniques. Coordination with Internal Teams: Collaborate closely with internal teams, such as the risk management and compliance team, to address specific security aspects. Development of Executive Reports: Prepare detailed executive reports on incidents, providing clear and concise information for decision making. Continuous Process Improvement: Identify opportunities for improvement in incident response processes and contribute to their continuous evolution. Participating in Advanced Drill Exercises: Engage in more advanced cybersecurity drills to test responsiveness and improve team readiness Required Skills: Proficient knowledge in administering Linux systems, preferably Red Hat Enterprise Linux (RHEL) Solid knowledge of cybersecurity principles and practical experience implementing security measures Practical experience in: Distributed File System (DFS) SIEM operation & tooling (Microsoft Sentinel, IBM QRadar, Splunk, Chronicle). EDR operation & tooling (MS Defender, Symantec, CrowdStrike Falcon among others). Strong understanding of TCP/IP networking, firewalls, and general network communication principles Strong analytical and problem-solving skills Excellent written and verbal communication skills. High ability to multi-task, prioritize, coordinate, work well under pressure and meet deadlines. Experience in incident, problem management, and/or change management. We are looking for someone with high skills in scripting as well, very motivated and with a good level of English (at least a B2 spoken level) No Shift & yes On calls. Model of work: hybrid W e will evaluate all applications. At Capgemini we have a wide range of training, face-to-face, online Certifications, etc. E ven if you do not have 100% of the previous requirements, we would love to meet you! Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of over 360,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fuelled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of €22 billion. Apply now!
