IT Security Specialist

DESCRIPTION OF THE TASKS

Following tasks will be performed by external service provider:

• Conduct computer forensics investigations on targeted cyber attacks and other security-related incidents involving leak of sensitive non-classified or classified information. It may including malware analysis and behavioural analysis to produce cyber threat intelligence

• Research and development of new solutions to perform better response to ever-developing cyber attack risks

• Regular participation in the main IT Security events and gathering research stakeholders in the field

• Involvement in the internal research workgroups of the Commission to develop internal Information Security policies

Requirements

DESCRIPTION OF THE TASKS

Following skills and knowledge are required for the performance of the above listed tasks: • Good knowledge of Microsoft and Linux Operating Systems

• Must be well versed in security technologies like: Antivirus, Firewalls, IDS, network analysers (e.g., Wireshark)

• Installation and configuration of security industry-standard solutions such as e.g., MISP, OpenCTI and theHIVE

• Experience with programming languages: Bash/Shell Scripting, Python. Other languages like Java, C/C++ may be an advantage

• Knowledge of offensive security techniques and procedures. Experience in Penetration testing

• Computer forensics tools, e.g., EnCase, Access Data, and FTK; and knowledge on the maintenance of the "forensic chain"

• Malware analysis, malware reverse-engineering and assembly language

• Good knowledge of Disassemblers, Debuggers and of malware analysis tools, e.g., IDA, OllyDbg, Cuckoo Sandbox, etc

• Good research skills and strong capacity to write user documentation for information systems and in the domain of IT security

• Ability to apply high quality standards and to perform risks analysis in the context of IT Security.

• Analysis and problem solving

• Very good communication skills with technical and non-technical audiences

• Capability to write clear and structured technical documents

• Capacity to prepare and write market studies related to IT Security solutions

• Ability to participate in technical meetings representing the team

SPECIFIC EXPERTISE

Following specific expertise is mandatory for the performance of tasks:

• expertise in digital forensic

CERTIFICATIONS & STANDARDS:

Certificates & standards are not required for the performance of tasks, but will support proving the candidate skills, e.g.:

• SANS

• EC-Council CEH

• Offsec