Ingeniero de Ciberseguridad

Our vision of information security is to protect our stakeholders by securing our information resources, managing our cyber risks, and enabling effective and efficient business strategies that are fully sponsored by executives and supported by all AXA employees.

As part of its strategy, Cyberdefense needs to reinforce the team with a project management Consultant service on Encryption service.

The Service will implement new features or scenarios of Encryption service in some entities according to CyberDefense, Encryption Product and entities needs / constraints. The deployment will be done according to Encryption Project Management and Product constraints / requirements.

Scope of Service :

1. Responsible for the execution of Encryption BAU Activities based in the technology Thales CipherTrust Security Manager (CTM) + Luna (HSM Technology) like for example :
2. Onboarding of new encryption applications based in the AXA Encryption service constraints
3. Run the platform in terms of performance, resilience, quality and SLA required
4. Recertificate use cases offered
5. Monitor the Encryption platform regularly and remediate possible issues, incidents or problems.
6. Manage new requests from applications' owners to onboard Encryption use cases
7. Manage required use cases or integrations with different AXA products / tools like no less than : Privileged Account Management, SIEM, Patching, Virtual hosts console, etc.
8. Support Encryption program activities when required like for example :
9. Migration of Encryption use cases (Agent or agent-less) between different platforms
10. Manage new required use cases or integrations with different AXA products / tools like no less than : Privileged Account Management, SIEM, Patching, Virtual hosts console, etc.
11. Support during technical sessions where activities execution plan definition or troubleshooting sessions
12. Identify possible blocking points or incompatible / risky topics that may interfere the Program or Service goals and propose remediation / mitigation solutions.
13. Support definition, study and deployment of possible new use cases / features in Encryption CTM platform
14. Operate with usual tools / products required for the daily work like no less than : Change Management process, Incident and Request management tool, CMDB, CTM reports, etc.

Security by default : All activities both BAU or Program supporting, will always supersede by Security policies and practices, and in specific activities will provide feedback / remediation actions for improving the level of security of the platform, like for example during a Pentest campaign.

Expertise

1. Technical Expertise
2. Expertise in Cryptographic techniques
3. Thales KMS : CipherTrust Security Manager & Luna HSM
4. Key Management Interoperability Protocol
5. Expertise in PAM product : CyberARK + authentication knowledge (SSH, GUI, SSL / RSA, Private / public keys)
6. Stakeholder management : The Service need to handle communications with applications' owners to manage their delivered / requested use cases to manage their expectations within the Encryption Product / Project team.
7. IT Security Expertise
8. Certification
9. Agile methodology (e.g. SCRUM or equivalent) is an advantage
10. Technical certification or Security certification is an advantage
11. Overall Expertise in the fields
12. Expertise in working in a complex international environment
13. Expertise in Security, Network or Infrastructure solutions
14. Expertise in IT
15. Expertise in some Cipher technology

Language

English environment is mandatory (including technical Information security English)