Cyber Security Infrastructure Specialist

Stack

Responsibilities

• ▹Daily operation and continuous development of the entire Cyber Defense Center infrastructure for an international group
• ▹Operating, debugging and analyzing incidents in a hybrid, mostly Linux-based infrastructure (private/public cloud, on-premises) from the operations/system level up to the application level
• ▹Technical leadership and first point of contact for the operations team on all technical questions
• ▹Initiating new projects to further develop the Cyber Defense Center and drive the introduction of new tools and technologies
• ▹Debugging and troubleshooting tools and applications with 1st- to 3rd-level support, working with software vendors
• ▹Advising on the use of new threat intelligence sources and attack patterns
• ▹Technical implementation of detection mechanisms
• ▹Planning and technical implementation of CI/CD pipelines, e.g. for Kubernetes deployments
• ▹Detecting and mitigating supply-chain attacks affecting tools and applications used in the Cyber Defense Center
• ▹Operating and further developing the IAM (Identity & Access Management) solutions used within the Cyber Defense Center
• ▹Certificate management: renewals, selection of encryption algorithms, CRLs

Requirements

• ▹At least 15+ years of experience in enterprise-scale Linux environments, including debugging and deep understanding of security-relevant features
• ▹At least 15+ years of experience with IT networks, protocols (including routing), VPN and VLAN
• ▹At least 5+ years of experience with various types of virtual environments
• ▹At least 7+ years of experience in network security (firewalls, IDS/IPS, WAF)
• ▹Expert-level scripting/programming experience in Python and PHP
• ▹Good ability to understand source code in languages such as Rust, Go and Java
• ▹Expert-level knowledge and experience with CI/CD pipelines
• ▹Expert-level knowledge and at least 10 years of experience with encryption techniques: algorithms, certificate management, key exchange
• ▹At least 7+ years of experience developing complex Infrastructure-as-Code and Configuration-as-Code environments, both on-premises and in the cloud (Azure, AWS)
• ▹At least 10 years of experience working with different databases (e.g. MySQL, MongoDB) in enterprise-scale architectures
• ▹At least 5+ years of experience with containers (Docker)
• ▹At least 5+ years of experience in cloud security across public and private clouds
• ▹At least 5+ years of experience in threat intelligence
• ▹At least 4+ years of experience installing and operating MISP
• ▹At least 5+ years of experience in secure software development, including application pentesting and vulnerability management
• ▹3-5 years of experience in endpoint security

Nice to have

• ▹Experience with RedHat and Debian Linux distributions
• ▹Experience with Docker, Kubernetes, Keycloak and Proxmox in cloud and large on-premises environments
• ▹Experience with GitHub Actions and Argo CD for Kubernetes deployments
• ▹Experience with Terraform, Ansible, ServiceNow, Jira, Splunk Phantom, Palo Alto Cortex and IBM Resilient
• ▹Solid understanding of the MITRE ATT&CK framework
• ▹Understanding of malware analysis and forensics
• ▹Knowledge of pentesting tools and techniques for networks and systems

Soft skills

What we offer

• ▹Responsible tasks in an international environment
• ▹Mobile office option
• ▹Structured onboarding phase with a mentor
• ▹Support for individual professional development
• ▹30 vacation days plus the option of 2 weeks unpaid leave, sabbatical and workation
• ▹Flexible working hours and working time models
• ▹Corporate Benefits discount program
• ▹Pizza and bowl days at the Munich and Augsburg locations
• ▹EGym Wellpass
• ▹JobRad company bike program
• ▹Team events (Oktoberfest, Christmas party, after-work gatherings, rooftop barbecues)
• ▹Small gestures for birthdays, anniversaries and special occasions

About the company

Orange Cyberdefense Germany is a leading cybersecurity provider offering consulting, solutions and managed security services. As part of the Orange group, it operates and develops Cyber Defense Centers for international enterprises.