Infrastructure Security Engineer

Massy - France

Applications have closed

INFRASTRUCTURE SECURITY ENGINEER (M/F)

Ivalua is a leading provider of cloud-based procurement solutions globally. 

THE OPPORTUNITY

This is an exciting opportunity for an Infrastructure Security Engineer role. As an Infrastructure Security Engineer, you will work with InfoSec, IT and R&D teams to keep our enterprise-class SaaS service secure from a variety of threats. You will engineer, implement, review and monitor technical security controls to protect and enhance the security of our server infrastructure, networks and applications. You will also help with operational security aspects which will include performing security impact assessments, reviewing firewalls rules, analyzing results from vulnerability or penetration testing reports, investigating security issues by analyzing logs and identifying actionable plans to address in the infrastructure and in the product.

W HAT YOU WILL BE DOING WITH US

  • Identify and recommend technical security measures to address the security threats and lead the security projects related to the infrastructure security (such as the review of encryption systems and key management, hardening of servers, hardening of Active Directory etc.)
  • Review/Develop security design and architecture of Cloud Infrastructure and Applications, and implement, administer and troubleshoot endpoint, server, network and cloud security technologies like, Firewall/VPN, IPS/IDS, Zero Trust, Email Security, SIEM, MDM, DLP, DDoS, NAC, CASB etc.
  • Define/Update and lead the vulnerability management program including performing infrastructure vulnerability scanning, internal and third-party penetration testing, and reviewing and validating any reported security vulnerabilities
  • Collaborate with the SOC team to improve our security investigation as well as threat intelligence processes and capabilities
  • Collaborate with IT operations, engineering and development teams to manage, monitor, track and remediate security incidents and provide a thorough post-event analysis
  • Support technical security controls related to compliance initiatives such as FedRAMP, PCI, NIST, SANS CIS 20 and other commercial compliance efforts as necessary
  • Assist customer and prospect facing teams with technical security questions related to the Ivalua hosting infrastructure and platform security
  • Act as the SME on infrastructure security, expand and develop sharing of technical knowledge and collaborate with multiple internal teams to review and improve the technical architecture and efficiency of IT and security operational processes

 

YOUR PROFILE

If you have the below experience and strengths this role could be for you.

Skills and Experience

  • 4+ year of experience on infrastructure and network security engineering/architecture, protocols and tools 
  • 3+ years hands-on experience in deploying security technologies like DLP, Database Activity Monitoring, MDM, NAC, IDS/IPS, CASB etc.
  • 3+ years of experience in assessing Infrastructure and Web Application vulnerabilities
  • Experience with scripting (such as Python, PowerShell etc.)
  • Knowledge of Active Directory (key concepts, main attacks, hardening etc.)
  • Knowledge of Cryptography concepts, encryption algorithms, protocols, keys and certificates management
  • Proficiency across Windows and Linux Operating Systems and MS SQL Database
  • Proficiency with cloud technology and deployments: Microsoft Azure (required), Amazon Web Services and Google Cloud (good to have)
  • Experience with security aspects of operating SaaS environments
  • Experience with security incident response and investigation
  • Ability to show initiative to drive progress and improvement
  • Ability to foster collaborative, open and working relationships with technology and other stakeholders
  • Experience with security compliance & certification programs such as OWASP, NIST, FedRAMP, PCI, SANS CIS 20
  • An Information Security qualification or evidence of starting to work towards e.g CISSP, OSCP, Azure GPEN or similar certification
  • Ability to handle multiple tasks, prioritize and meet deadlines
  • Prior experience in financial services, government or any other highly regulated sector is a plus

Soft Skills

  • Excellent writing and communication skills
  • Excellent English and French
  • Your personality will make a difference: Committed, involved, autonomous, analytical and commercially aware, you thrive in a challenging environment, and you are well organised.

WHAT WE CAN DO FOR YOU

  • An innovative and stimulating work environment
  • Great training and career development
  • You will work with a diverse and global team made up of exceptionally passionate, talented and motivated colleagues who are established leaders in their field
  • Regular social events, team sports or musical activities (under normal conditions)
  • We pride ourselves in customer experience, Agility, Pragmatism, Positive attitude and enthusiasm, Team play, Continuous learning and Improvement and accountability. 
  • Ivalua received the Happy @ work France and Germany 2020.
  • In 2022 we have scooped a hat-trick of awards at Comparably’s latest companies ranking: Best Company Culture, Best Company for Women and Best Company for Diversity!

 

COMPANY OVERVIEW

A “Magic Quadrant” leader, Ivalua’s solutions work in a complex global economy.  Our innovative Source-to-Pay solutions include automating customized workflows to source, contract, request, procure, receive, and pay for goods and services across the enterprise, refining the procurement lifecycle while reducing cost and risk of spending on indirect goods, direct goods and services, and improving supplier collaboration.

All companies want the best and brightest. At Ivalua, we also want team members who have a global point of view and who bring customer-focused enthusiasm and ambition to the table. We are a company of doers, of problem solvers, of figure-it-outers. We have fun and we work hard. This is a truly global company with a diverse team of contributors and a set of core values that people can feel every day across all our offices.

 

For more information, please visit us on www.ivalua.com or check us out on LinkedIn.com.

#LI-AY1

#LI-HYBRID

 

 

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Tags: Active Directory Azure CASB CISSP Cloud Compliance Cryptography DDoS Encryption FedRAMP Firewalls GCP GPEN IDS Incident response IPS Linux Monitoring MSSQL Network security NIST OSCP OWASP Pentesting PowerShell Python R&D SaaS SANS Scripting SIEM SOC SQL Threat intelligence VPN Vulnerabilities Vulnerability management Windows Zero Trust

Perks/benefits: Career development Team events

Region: Europe
Country: France
Job stats:  11  0  0

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.