Application Production Support - Security Network specialist

We are seeking an experienced and highly skilled Cybersecurity Engineer to join our team.

This role is crucial in safeguarding our organization''s digital infrastructure through proactive threat management, strategic security planning, managing security systems and effective incident response.

You will lead the implementation of security measures, collaborate across teams and continuously improve our security posture in line with emerging threats and compliance requirements.

The ideal candidate will have deep expertise in network security, secure network segmentation strategies and a strong ability to communicate and collaborate across departments. The employee may be required to perform other job-related duties as requested by management.

Responsibilities

• Security System ImplementationImplementing and managing security systems and infrastructure. This includes firewalls, intrusion detection systems (IDS) and intrusion prevention systems (IPS)
• Threat Analysis and Incident ResponseMonitoring for security threats and responding to incidents are critical responsibilities. Analyzing security logs, network traffic, and other data sources to identify suspicious activity. When incidents occur, leading the response effort, containing the threat, investigating the cause and restoring system communications to a secure state.
• Security Policy Development and EnforcementCreating and maintaining security policies, standards, and procedures is essential for establishing a strong security posture. Developing these policies and ensure they are effectively communicated and enforced throughout the organization. Periodic review of security policy posture.
• Staying Up-to-DateThe cybersecurity landscape is constantly evolving, so staying current with the latest threats, vulnerabilities, and security technologies is crucial. The candidate must continuously learn and adapt to maintain their expertise.
• For Firewall and Microsegmentation Management scope, take care of

o Incidents

o Requests

o Changes

Ensure that SLA targets are met for above activities

Coordinate closely with Rome IT Production Security Team and all other BNL BNP Paribas IT teams (Incident coordination, Security, Infrastructure, Development teams, etc.)

• Contribute to the knowledge transfer with BNL Production Security team
• Contribute to the definition of procedures and processes necessary for the team
• Contribute to incidents analysis and associated problem management
• Contribute to the regular activity reporting and KPI calculation
• Contribute to continuous improvement actions

Expertise in cybersecurity frameworks and practices (ISO27001, DORA, NIST, NIS2)

• Deep knowledge of Zero Trust architecture and principles and Microsegmentation tool
• Solid understanding of cloud security (GCP and/or AWS)
• Network Security Expertise
• Knowledge of firewall/access technologies (Palo Alto, Fortinet, CheckPoint)
• Firewall policies, NAT, SSL inspection and web filtering configuration
• Site-to-site VPN tunnels maintenance and troubleshooting
• Firewall logs, alerts and anomalies analysis
• Monitoring security threats and responding to incidents
• Expertise in traffic flow analysis and familiarity with Elasticsearch Ecosystem
• Hands-on experience with specific microsegmentation technologies, such as Illumio Zero Trust
• Ability to convey technical information clearly to non-technical stakeholders and collaborate effectively with cross-functional teams.
• Experience with ServiceNow ticketing system

Fluent in English (both written and spoken)

• Excellent communication-skills to work constructive and in cooperation with internal and external teams
• Analytical and problem-solving skills
• Good degree of responsibility and autonomy

Preferable:

• Develop and implement automation script (Python, Bash) for automation and customization tasks