Security Engineer

Omschrijving:

The Web Application Firewall squad within IT Middleware Services Tribe will work together with the existing Web Security and Authentication, Web Design and Secure Gateways squads for the technical design, installation, set-up, industrialization, management, support and documentation of the Web Security Infrastructure
The client needs a Web Application Firewall Security Expert to strengthen the Web Application Firewall squad, which works closely also with Cyber Defense to protect the company’s online banking applications.

The mission has different aspects:

Building, testing, deploying, analyzing, administering, and maintaining enterprise F5 Platforms with a focus on Reverse Proxy, Authentication, Monitoring & Protection (RAMP) services
Configuring, conducting, and managing the F5 LTM module
Configuring and maintaining the F5 ASM module (security policies, updates, new applications integration…)
Develop, maintain and optimize customized F5 iRules and scripts
Assist application developers and enforce secure coding best practices.
Technical testing of significant maintenance, operational, upgrade activities and process enhancements/updates
Automating configuration and implementation activities
Design, deliver and support the integration layer between operating systems and business applications.
Integration of web application in the Web Infrastructure for the intranet as well as for the DMZ.
Share knowledge with colleagues on technology subjects, solutions, best practices on vendor specific and also on generic security components
Establish and document installations, guidelines, policies and procedures for relevant stakeholders.
Assist in production support (incident, problem and change management) for the Web Application firewall squad.
Assist architects in order to perform cost-benefit analyses of proposed Web implementations, enhancements and modifications.
Set and enforce compatibility and interoperability standards that ensure site accessibility for all users.
Monitor and report on Web site traffic and performance.
Participate in the industrialization of our assets
Participate in the On-Call calendar (7/7 18:00 – 7:30)
Work on-site (~3 days)

Master or equivalent by experience with at least 3 years’ strong experience in a similar function: WEB Security infrastructure in banking sector

At least 2 years of experience with F5 ASM WAF
At least 3 years of experience in Web Security

A professional experience of at least 5 years, some in infra automation.

Strong knowledge on Web application firewalls, HTTP, TCP, SSL and PKI
Strong System administration experience with the F5 Big-IP Application Security Manager (ASM) and Local Traffic Manager (LTM) including tmsh and iRules
Strong experience in iRules development.
Experience in web vulnerability management.
Experience in (infra) automation with Python.
Experience in scripting languagessuch as Perl and Bash.
Generic knowledge on: Web access management, anti-virus, firewalls, load balancers, networks and DMZ
Experience in technical documentation.

Strong experience in managing a complex WAF environment in the sector of financial services
Very good knowledge of REST based services and APIs
Experience in development and automation tools Ansible and Git.
Information Security related background
Familiar with DevOps methodologies and container technologies such as Docker
Familiar with an agile environment

High awareness to risks related to the financial sector
Follows the defined processes for projects, incident and change management with high attention to business and financial impact
Experience with working in a complex organization.
Being standalone and team worker, analytical minded, meet commitment, ability to work in a dynamic and multi-cultural environment, flexible, customer-oriented
Ability to work in a fast-paced, agile environment and flexibility to accommodate demanding sprint schedules

Ability to work effectively with a wide range of constituencies in a diverse community

Able to understand bank related business processes and assess impacts on business
Agile methodology
DevOps

ITIL

Demonstrated team player with strong and effective customer care skills.
Quick self-starter, pro-active and innovative attitude.
Open minded and show flexibility in self-learning new technologies/tools.
Good analytical and synthesis skills.
Process-oriented with high attention to detail

Talent must be pampered. That is why we not only offer you a permanent contract of indefinite duration in exchange for your knowledge and commitment. We also act as your career planner and look for the best opportunities, training and growth opportunities for you. In addition to your competitive salary, you will receive a lot of fringe benefits (daily allowance, group and hospitalization insurance, company car, ...).

Are you a freelancer? Of course, you are also eligible and will receive a competitive rate.

Are you looking for an employer to guide your ICT skills in the right direction? Are you impatient to let your dynamism and ambition bear fruit in difficult projects? This is what we offer you at USG ICT, because we make the most of your knowledge and skills. Your mission: to carry out various missions and thus strengthen the results of our customers.

Freelancers are also welcome !