Cyber Security Engineer L2 in Bucuresti

The OpportunityCybersecurity Engineer L2 is a member of Incident & Response Team in an international context of Cyber Defense Center. The team has to implement and maintain new technologies and tools aimed at security for Worldline’s defense. Develop and update Playbooks to counter latest Threat Scenarios and Attack Methods. ​Day-to-Day Responsibilities​ Develop and Update Investigation and Forensics playbooks for the available tools and technologies; You build new Use Cases and Alerts for the SIEM and connected systems to match the new shifting of tactics and methods used by attackers; Continuous Service Improvement (CSI) for existing technologies and tools, by reviewing Use Cases, Alerts and Correlations and applying Lessons Learned; Coordinate Incident Investigation and Forensics activities inside the team and other resolver teams involved; Propose configuration and optimization of security tools with scope; Who Are We Looking For We look for big thinkers. People who can drive positive change, step up and show what’s next – people with passion, can-do attitude and a hunger to learn and grow. In practice this means: You can perform individual Incident Investigation and Forensics activities unsupervised. You can lead a team a Incident & Response Analysts to identify the incident resolution. You've got substantial knowledge of enterprise architecture designs and integrations between multiple systems that are interconnected. Good knowledge of Security best practices as well as the attack tactics and methods used. Ability to corelate individual events/alerts to create a clear view of the incident and it’s ramifications to ensure that no persistent threats remaind unthreated. You master Windows and/or Unix based OS environments both for enduser and server with a high degree of cloud interconnectivity and deployment strategy. 5+ years of experience in IT Delivery with a minimum of 2 years of IT Security focus.