Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent

to our team and look forward to hearing from you.

BACKGROUND:

eu-LISA is the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and

Justice (eu-LISA) manages large-scale IT systems to support the implementation of asylum, border management and migration policies

in the European Union (EU). The Agency is also a front-runner for the digitalisation efforts of the EU's Justice and Home Affairs

domain, building a new information architecture and contributing to the development of a new security ecosystem. Since the

Agency's beginnings in 2012, eu-LISA has become the digital engine of the Schengen Area. With its activities and tasks, the Agency

adds value to the EU Member States by supporting their efforts towards justice, security and freedom.

TASK DESCRIPTION:

Supports the Agency's Security Officers in developing and maintaining the security architecture of the agency in collaboration

with the Enterprise Architect.

The profile will be expected to perform the following tasks:
Create and manage security standards, design patterns, and reference architectures
Analyse and define security requirements for networks, corporate applications/systems , end user computing, mobility, and data

center technologies and solutions

Develop and maintain the organizational security control framework;
Ensure that IT Security controls meet the requirements of all regulatory requirements or contractual requirements
Work with the Security Officer and IT teams to ensure that implemented security technologies are integrated and fully utilized

as intended in the protection of agency information systems.

Monitoring and analysing trends in IT Security
Develop strategic and detailed technical roadmaps of the enterprise security environments and the associated technologies

required to deliver these solutions on a global basis.

Develop the business, information and technical artifacts that constitute the enterprise information security architecture and

solutions.

Researches, evaluates, designs, tests, recommends and plans the implementation of new or updated information security

technologies.

EDUCATION:

Minimum 4 years of relevant education (master or equivalent) after the secondary school

MINIMUM EXPERIENCE:

Minimum 6 years of relevant professional experience in IT security
Minimum 4 years of professional experience in security architecture

ADDITIONAL NEEDED QUALIFICATION, KNOWLEDGE AND SKILLS:

Expected to possess advanced knowledge of/in:
Core domains of IT Infrastructure such as Data Networks, Server and Desktop hardware and Operating Systems, Messaging,

Collaboration, Storage and Backups, and related monitoring and management systems.

Security-specific architecture methodology, e.g. SABSA
Security architecture models, security strategy development, and compliance management.
Mobile Architecture, Network and Application Security and/or Data protection
Secure development processes.
Application Security Vulnerabilities such as OWASP Top 10, CWE/SANS Top 25 and remediation approaches
Cybersecurity control good practice such as the SANS Top 20 Critical Controls.
IT audit/assessment frameworks: ISO-standards; NIST, CobiT and Industry standard application development methodologies
Enterprise authentication authorization and identity management schemes (Active directory, LDAP, etc.)
Technical security controls such as firewalls, IDS/IPS, Vulnerability Management, web application firewalls, security gateways,

WiFi, Mobile security, DLP, public key infrastructure, Encryption and Authentication techniques,

Relational Databases, Middleware Applications, Collaboration and Document management solutions.
XML, Web Services and SOAP protocols, both in client and server as well as dynamic languages such as Objective-C, VBScript,

JavaScript

Network and web related protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, SMTP, SNMP, ICAP, etc.)
Expected to possess one or more of the following qualifications:
Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration

(CISSP-ISSAP)

Certified Information Security Manager (CISM)
Certified Information Systems Auditor (CISA)
TOGAF certification
Other similar credentials

We never know what new opportunities might be just over the horizon. If this opportunity isn't for you, please feel free to send

us your resume anyway and be the first to know if something suitable for your skills and experience comes up.

Role

Security Architect

Tags for this job

eu-LISA

Similar Jobs

IT Security Specialist

Spektrum•Strasbourg

Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. BACKGROUND: eu-LISA is the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA) manages large-scale IT systems to support the implementation of asylum, border management and migration policies in the European Union (EU). The Agency is also a front-runner for the digitalisation efforts of the EU's Justice and Home Affairs domain, building a new information architecture and contributing to the development of a new security ecosystem. Since the Agency's beginnings in 2012, eu-LISA has become the digital engine of the Schengen Area. With its activities and tasks, the Agency adds value to the EU Member States by supporting their efforts towards justice, security and freedom. TASK DESCRIPTION: * Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host- based security systems * Develop and validate baseline security configurations for operating systems, applications, and networking and telecommunications equipment * Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommend remedial action * Perform source code reviews * Perform network and application penetration testing ( Black box, Grey box and White box) * Defining detailed security architecture * Performing technical security audits * Perform log analysis and security monitoring * Perform IT infrastructure/ Application Security configuration reviews * Design and implement technical security mechanisms and technologies * Design and develop technical security standards and procedures EDUCATION: * Minimum 4 years of relevant education (master or equivalent) after the secondary school MINIMUM EXPERIENCE: * Minimum 6 years of relevant professional experience in IT Security ADDITIONAL NEEDED QUALIFICATION, KNOWLEDGE AND SKILLS: * Expected to possess advanced knowledge of/in: * Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.) * Good practice in the secure configuration of servers, network devices and applications * Networking protocols and application communications * Network analysis tools * Securing Unix and Windows operating systems * Securing middleware and applications. * Network penetration testing * Web application penetration testing * Vulnerability assessments * Forensic image collection and analysis * Managing/deploying the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services * Open Web Application Security Protocol (OWASP) and secure software development standards * Performing security code reviews. * Security monitoring, threat detection and incident response; * Proactively and iteratively searching through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting); * Security operations engineering (e.g. implementation of defensive measures, threat intelligence production); * Linux administration, TCP/IP, Network Security. * Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc. * Expected to possess one or more of the following qualifications: * Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP) * Certified Information Security Manager (CISM) * Certified Information Systems Auditor (CISA) * OSCP, OSCE, GPEN, CEH, CCNA, CCNP We never know what new opportunities might be just over the horizon. If this opportunity isn't for you, please feel free to send us your resume anyway and be the first to know if something suitable for your skills and experience comes up.

Deadline: Aug 21Posted: Jul 17

eu-LISA

Intermediate Application Architect

Spektrum•Strasbourg

Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. BACKGROUND: eu-LISA is the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA) manages large-scale IT systems to support the implementation of asylum, border management and migration policies in the European Union (EU). The Agency is also a front-runner for the digitalisation efforts of the EU's Justice and Home Affairs domain, building a new information architecture and contributing to the development of a new security ecosystem. Since the Agency's beginnings in 2012, eu-LISA has become the digital engine of the Schengen Area. With its activities and tasks, the Agency adds value to the EU Member States by supporting their efforts towards justice, security and freedom. TASK DESCRIPTION: * Architecture and design of information systems. * Review of the architecture of existing systems * Design and development of component architecture and building blocks * Analysis of the integration of different information systems * Data analysis and data modelling. * Coordination of the implementation of the technical architecture * Technical interface between the project leaders and the developers * Production of software architecture documents * Participation in technical working groups, progress meetings and meetings with the users * Assistance in the testing, the technical documentation, the deployment, the evaluation and the reporting EDUCATION: * Minimum 3 years of relevant education (bachelor or equivalent) after the secondary school MINIMUM EXPERIENCE: * Minimum 6 years of IT professional experience (overall encompassing at least half of the first ten "Qualification, Knowledge and skills" domains below) * Minimum 2 years’ experience in architecture and design of information systems * Minimum 2 years’ experience in development of information systems * Minimum 2 years’ experience with Unified Modelling Language (UML) or Computer-Aided Software Engineering (CASE) tools ADDITIONAL NEEDED QUALIFICATION, KNOWLEDGE AND SKILLS: * Experience in Service Bus Architecture * Experience with relational databases * Experience in web technologies * Experience with Linux, UNIX or AIX Enterprise environment * In-depth knowledge of Service Oriented Architecture * In depth knowledge of applications design * In depth knowledge of modelling tools * Good knowledge of Object Oriented Programming languages * Good knowledge of Relational Database Management Systems (DBMS) * Good knowledge of business process analysis * Knowledge of interoperability technology (e.g. web services, message oriented middleware, service oriented bus) * Good redaction skills. * Ability to give technical presentations * Ability to apply high quality standards * Ability to cope with fast changing technologies used in application architecture and design * Ability to participate in multi-lingual meetings, good communication skills. * Capability of working in team. * Open Group TOGAF (level 1 and 2) certification advantageous (in depth knowledge of the framework) together with knowledge of Enterprise Architecture principles.). We never know what new opportunities might be just over the horizon. If this opportunity isn't for you, please feel free to send us your resume anyway and be the first to know if something suitable for your skills and experience comes up.

Deadline: Aug 21Posted: Jul 17

eu-LISA

Senior Solution Architect

Spektrum•Strasbourg

Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. BACKGROUND: eu-LISA is the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA) manages large-scale IT systems to support the implementation of asylum, border management and migration policies in the European Union (EU). The Agency is also a front-runner for the digitalisation efforts of the EU's Justice and Home Affairs domain, building a new information architecture and contributing to the development of a new security ecosystem. Since the Agency's beginnings in 2012, eu-LISA has become the digital engine of the Schengen Area. With its activities and tasks, the Agency adds value to the EU Member States by supporting their efforts towards justice, security and freedom. TASK DESCRIPTION: * Very good knowledge and experience in grasping the technical requirements and designing (in collaboration with the stakeholders) a suitable architectural solution; * Design the Service Oriented Architecture (SOA) tier * Participate in design sessions with project staff as required * Build business processes to support orchestration of web services * Work with SOA development team to implement SOA components * Participate in team reviews of design artifacts and code, make changes as required, and recommend alternative solutions where appropriate * Design, code, unit test, system test, performance test, debug, implement, and support application systems either through new development of systems, enhancement of existing systems, or 3rd party products * Work with technical and functional teams to ensure effective delivery of systems * Use software development methodologies and standards as defined by organization to effectively code and deliver systems * Work with technical teams within group as well as outside group to ensure effective delivery * Follow established processes for configuration and release management to ensure that all project artifacts are managed, integrated, and versioned according to standards. EDUCATION: * Minimum 4 years of relevant education (master or equivalent) after the secondary school MINIMUM EXPERIENCE: * Minimum 9 years of IT professional experience, of which * 5 years’ experience with SOA Platform Architecture and Development, including 2 years working with Oracle database ADDITIONAL NEEDED QUALIFICATION, KNOWLEDGE AND SKILLS: * Open Group TOGAF (level 1 and 2) certification advantageous (in depth knowledge of the framework) together with knowledge of Enterprise Architecture principles. * Strong problem solving skills and knowledge of WebLogic suite 11g * Experience with Linux, UNIX or AIX Enterprise environment * Strong understanding of Service Oriented Architectures * Strong background in systems architecture and relevant technologies, including portal technologies, middleware technologies, and J2EE * Strong skills in Services Design Best Practices, Service Performance Monitoring, Service Performance Tuning, Service Interface Specifications * Object Oriented skills using open architecture standards as well as best practices, design principles, and techniques with regards to: BPEL, UML, WSDL, JDBC, SQL, XML/XSL, SOAP,WebServices * WebServices Manager experience * Significant knowledge and experience designing and developing Enterprise Service Bus/SOA/Integration Tier Architecture (BPEL/Business Process Orchestration, WebServices, J2EE) * Knowledge of SOA Design patterns for building middleware systems ground up using Message Routing, Content Enrichment, Message Filtering, Message Transformation, Guaranteed delivery, Message sequencing, Batch message processing, error handling and reconciliation mechanisms * Security, Logging, Auditing, Policy Management and Performance Monitoring and KPI for end-to-end process execution * Expertise in interoperability standards and methods We never know what new opportunities might be just over the horizon. If this opportunity isn't for you, please feel free to send us your resume anyway and be the first to know if something suitable for your skills and experience comes up.

Deadline: Aug 21Posted: Jul 17

eu-LISA