Cybersecurity Specialist & Administrator

Company Description

Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development.

Arηs Group was acquired by Accenture in July 2024.

Job Description

• Provide cybersecurity-related support to users, administrators and technical teams across enterprise IT environments
• Integrate cybersecurity solutions into the organization’s infrastructure and ensure their secure and reliable operation
• Securely configure systems, services, applications and security platforms in accordance with organizational security policies and standards
• Design, deploy, configure, monitor, maintain and troubleshoot cybersecurity infrastructure and security controls
• Implement and maintain cybersecurity procedures, technical controls and security hardening measures
• Monitor security systems, investigate alerts and respond to security-related incidents and events
• Manage and support security monitoring platforms, including Splunk, Microsoft Sentinel and Darktrace
• Operate and maintain Public Key Infrastructure (PKI) services, including certificate lifecycle management and related security operations
• Support vulnerability management activities using Tenable, including vulnerability assessment, remediation tracking and penetration testing coordination
• Administer and maintain Privileged Access Management (PAM) solutions to ensure secure access to privileged accounts and resources
• Perform application security testing activities using Checkmarx Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) solutions
• Support the implementation and operation of Zero Trust Architecture controls and security principles across enterprise environments
• Implement, test and manage security patches and remediation activities to address technical vulnerabilities
• Assess the effectiveness and performance of implemented security controls and recommend improvements where necessary
• Participate in information security reviews, audits and compliance activities
• Provide technical expertise, guidance and recommendations regarding cybersecurity tools, technologies and secure configurations
• Identify security requirements and translate business and technical requirements into secure implementation approaches
• Collaborate with network, systems, infrastructure and security teams to implement and maintain secure solutions
• Support the deployment, configuration and integration of cybersecurity technologies across enterprise systems
• Investigate, diagnose and resolve cybersecurity-related issues affecting systems, services and infrastructure
• Create, maintain and update technical documentation, security configurations, operational procedures and support materials
• Ensure service continuity and operational support of managed cybersecurity platforms in accordance with defined service levels
• Recommend and evaluate security tools, technologies and improvements to strengthen the organization’s security posture
• Perform additional tasks as assigned by the supervisor

Qualifications

• Minimum 8 years of relevant IT professional experience
• Minimum 5 years of experience in a similar role
• At least three of the following certifications:

• GCED (GIAC Certified Enterprise Defender)
• GPPA (GIAC Certified Perimeter Protection Analyst)
• GCWN (GIAC Certified Windows Security Administrator)
• GCUX (GIAC Certified UNIX Security Administrator)
• GCCC (GIAC Certified Critical Controls)
• SSCP (Systems Security Certified Practitioner)
• CCSP (Certified Cloud Security Professional)
• CISSP (Certified Information Systems Security Professional)
• CSSLP (Certified Secure Software Lifecycle Professional)
• GSEC (GIAC Security Essentials)
• ECSA (EC-Council Certified Security Analyst)
• SCPO (SABSA Certified Security Operations & Service Management Practitioner)
• or equivalent, internationally recognized certification

• Good understanding of systems development lifecycle (SDLC) principles and security integration throughout the lifecycle
• Strong knowledge of operating system security concepts and security hardening practices
• Strong knowledge of computer and network security principles
• Good understanding of security controls and cybersecurity frameworks
• Knowledge of offensive and defensive security practices
• Knowledge of secure coding principles and application security concepts
• Hands-on experience working as an Information Security Administrator or Cybersecurity Specialist
• Knowledge of vulnerabilities, threats, attack techniques, exploit mechanisms, penetration testing methodologies and risk analysis practices
• Knowledge of ISO 27000 family standards and CIS Critical Security Controls
• Knowledge of OWASP standards and application security best practices
• Good understanding of network protocols and services, including SMTP, DNS, DHCP, LDAP, NTP, PKI and Certificate Authorities
• Practical experience designing and performing security testing activities
• Practical experience managing Identity and Access Management (IAM) security functions
• Experience integrating cybersecurity technologies into enterprise environments
• Experience securely configuring infrastructure, systems and security platforms
• Experience assessing security controls and evaluating security effectiveness
• Practical experience developing and testing secure scripts and automation solutions
• Strong troubleshooting and incident analysis capabilities
• Excellent communication, documentation and stakeholder engagement skills
• Strong analytical and problem-solving abilities with excellent attention to detail
• Ability to work effectively in complex technical environments and quickly adapt to new technologies

Additional Information

• Security clearance required (EU Restricted) from 1st day of collaboration