BNP Paribas is hiring For a Windows and Linux Security Expert

Greetings for BNP Paribas!

We are hiring for a Window and Linux Security Expert,

Position Purpose

The BNP Paribas Fortis IT department is currently working in Agile mode, which offers a

challenging and motivating environment where teams and employees are empowered to manage

their own technical domain.

You will work in the IT Security Production Tribe, within the squad Windows and Linux Security.

Our stakeholders and partners can be part of the business, the rest of the local IT or with BNPP

Responsibilities

Direct Responsibilities

The Windows and Linux Security squad manages the support and services in following risk- and

security-related domains:

• Authentication
• Authorization and provisioning
• Security configuration
• Anti-malware
• Vulnerability management
• Risk management
• Security monitoring

Technical & Behavioral Competencies (Mandatory)

We are looking for a second-line support person who can assist the squad in their daily activities, in

scripting and in delivering documents using your technical writing skills such as but not limited to

secure standard documents, evidencing documents for audits & controls, standard operating

procedures, end-user documentation and helpdesk documentation.

Some of the main activities in the squad are:

Expert knowledge of

• Red Hat Idm (Directory Server)
• OpenLDAP and Kerberos MIT
• Active Directory
• Linux security (OS)
• Windows Integrated Security

Solid knowledge of

• Authentication and authorization
• IAM-solutions
• Scripting (bash, PowerShell, )
• the main IT-security principles and best practices
• Basic Networking knowledgeTrellix maintenance and support
• Configuration of the security monitoring tools

Security monitoring and analysis of events

• Contribute to the migration of BNPPF assets to the groups cloud infra:
• Windows security components
• Windows / Linux applications
• Third line security support and incident response, related to authentication, authorisation or

vulnerability issues.

• Contribution to the Critical Asset Recovery, DORA, ...
• Risk and vulnerability management
• Take necessary actions to close risks and vulnerabilities
• Contribution to audit campaigns and control plans
• Reporting to management and other stakeholders