Ingeniero de Seguridad en Criptografía y Gestión de Claves

Mission context :

Our vision of information security is to protect our stakeholders by securing our information resources, managing our cyber risks, and enabling effective and efficient business strategies that are fully sponsored by executives and supported by all AXA employees.

As part of its strategy, Cyberdefense needs to reinforce the team with a project management Consultant service on Encryption service.

The Service will implement new features or scenarios of Encryption service in some entities according to CyberDefense, Encryption Product and entities needs / constraints. The deployment will be done according to Encryption Project Management and Product constraints / requirements.

Scope of Service :

• Responsible for the execution of Encryption BAU Activities based in the technology Thales CipherTrust Security Manager (CTM) + Luna (HSM Technology) like for example :
• Onboarding of new encryption applications based in the AXA Encryption service constraints
• Run the platform in terms of performance, resilience, quality and SLA required
• Recertificate use cases offered
• Monitor the Encryption platform regularly and remediate possible issues, incidents or problems.
• Manage new requests from applications' owners to onboard Encryption use cases
• Manage required use cases or integrations with different AXA products / tools like no less than : Privileged Account Management, SIEM, Patching, Virtual hosts console, etc.
• Support Encryption program activities when required like for example :
• Migration of Encryption use cases (Agent or agent-less) between different platforms
• Manage new required use cases or integrations with different AXA products / tools like no less than : Privileged Account Management, SIEM, Patching, Virtual hosts console, etc.
• Support during technical sessions where activities execution plan definition or troubleshooting sessions
• Identify possible blocking points or incompatible / risky topics that may interfere with the Program or Service goals and propose remediation / mitigation solutions.
• Support definition, study and deployment of possible new use cases / features in Encryption CTM platform
• Operate with usual tools / products required for the daily work like no less than : Change Management process, Incident and Request management tool, CMDB, CTM reports, etc.
• Security by default : All activities both BAU or Program supporting, will always supersede by Security policies and practices, and in specific activities will provide feedback / remediation actions for improving the level of security of the platform, like for example during a Pentest campaign.

Expertise

• Technical Expertise
• Expertise in Cryptographic techniques
• Thales KMS : CipherTrust Security Manager & Luna HSM
• Key Management Interoperability Protocol
• Expertise in PAM product : CyberARK + authentication knowledge (SSH, GUI, SSL / RSA, Private / public keys)
• Stakeholder management : The Service needs to handle communications with applications' owners to manage their delivered / requested use cases to manage their expectations within the Encryption Product / Project team.
• IT Security Expertise

Certification

• Agile methodology (e.g. SCRUM or equivalent) is an advantage
• Technical certification or Security certification is an advantage

Overall Expertise in the fields

• Expertise in working in a complex international environment
• Expertise in Security, Network or Infrastructure solutions
• Expertise in IT
• Expertise in some Cipher technology

Language

• English environment is mandatory (including technical Information security English)
• Spanish environment is preferred
• French environment is a plus