Security Operations Engineer

Job Requirements:
Proven knowledge of information systems security; Knowledge of the necessary steps to secure an information system/ environment; Knowledge about well-known security best practices (OWASP methodologies, SANS, NIST, CIS Benchmarks, etc.) Good knowledge and experience in different areas of computer security: Security norms (GDPR, ISO27001) Encryption concepts Threat modeling/ risk assessments Vulnerability management Security hardening Knowledge about SSDL (Secure Software Development Lifecycle) practices; Experience in using and configuring various security tools: SAST, DAST, Antivirus, vulnerability management tools, etc.; A creative mentality in recognizing various security needs; Ability to clearly communicate proposed improvements to various stakeholders; Experience in documenting technical concepts, proposing procedures, and following established policies; Experience analyzing pentest reports, doing vulnerability assessments; Basic experience in securing AWS cloud environments and their products; Knowledge about networking and infrastructure concepts; Good verbal communication skills and English language skills.
Responsibilities:
Ensure the security of Pentalog's clients (applications and infrastructure). Identify the security needs of clients and put in place a security roadmap (Be the technical driver for the security activities). Put in place/take part in the implementation of the necessary security controls, in accordance with the client's needs and the security operational activities. Develop and maintain various security-related tools, automation, and integrations on client missions. Work with our external teams to ensure consistent delivery of service. Continuously tune and improve documentation of policies and procedures.
Extra skills
A strong desire to learn and continually develop skills inside the team; Basic programming and scripting skills; Professional security certifications (e.g. Security+, CASP, Pentest+ etc.); Knowledge of forensics concepts (analyzing security incidents).