Mandatory Requirements
Minimum 4 years of relevant education (master or equivalent) after the secondary school.
Minimum 6 years of relevant professional experience in IT Security.
Experience with
Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.);
Good practice in the secure configuration of servers, network devices and applications;
Networking protocols and application communications;
Network analysis tools;
Securing Unix and Windows operating systems;
Securing middleware and applications;
Network penetration testing;
Web application penetration testing;
Vulnerability assessments;
Forensic image collection and analysis;
Manage/deploy the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services;
Open Web Application Security Protocol (OWASP) and secure software development standards;
Perform security code reviews;
Security monitoring, threat detection and incident response;
Proactively and iteratively search through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);
Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);
Linux administration, TCP/IP, Network Security;
Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.
One of the following Certifications
Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration
(CISSP-ISSAP);
Certified Information Security Manager (CISM);
Certified Information Systems Auditor (CISA);
OSCP, OSCE, GPEN, CEH, CCNA, CCNP.
