Eurofins' Group Architecture Office offers consultancy enterprise and solution architecture services both at Group IT Solutions level and across the wider business areas of activity and supports numerous infrastructure and application related projects. We are looking for a talented Security Architect to join us as a trusted security advisor in multiple projects across a variety of business areas and geographies.
In the role, you will identify major security deficiencies and define pragmatic approaches on how to remediate them at scale. It is your responsibility to ensure that Group Architecture, DevOps and Cloud Engineering platforms and solutions are securely architected, designed, built, configured, tested, and deployed as defined per security policies defined by Eurofins IT Security or standards and good practices.
As a Cybersecurity Architecture Specialist within our GSC Architecture Office, you will:
- Establish close relationships and collaborations with Eurofins IT Security, operations, infrastructure, development, and Group Architecture to ensure visibility and exchanges;
- Establish best practices for DevOps Teams security practices and security testing;
- Contribute and follow-up on development and evolution of security strategies and roadmap and projects together with Enterprise, Solution and DevOps architecture and also Eurofins IT Security;
- Drive new technologies or product evaluation through Proof-of-Concepts together with Program Developers and Eurofins IT Security;
- Take the technical security leadership for platform and solution implementation and transformation together with Eurofins IT Security and Program Application Architects;
- Replace with Collaborate closely with Eurofins IT Security on architecture reviews, security assessments and vulnerability management. Ensure the adoption of secure application design and architecture techniques based on industry standards and well architecture frameworks;
- Develop security architecture design and blueprints for the target state and ensure their elaboration, validation, and communication with Eurofins IT Security and Solution Architects;
- Convert and promote Security culture across all DevOps, Cloud and GSC IT Solutions Programs.
- Bachelor’s degree in IT, engineering or related;
- Active entry level security certification such as CompTIA Security+, Microsoft SC-900 (Security, Compliance, and Identity Fundamentals) or similar.
- Active entry level Cloud certification such as AZ-900: Microsoft Azure Fundamentals, AWS Certified Cloud Practitioner or similar.
- Minimum of 2 years of experience in security around any of the following areas: Cloud security, infrastructure security, software architecture design and application security;
- General knowledge of on-prem hosting technologies and Microsoft Azure hosting technologies;
- Knowledge of identity management, PKI solutions, log management and multifactor authentication tools;
- Knowledge of vulnerability management process and security assessment methodologies including penetration testing, SAST, DAST and SCA;
- Working knowledge of security standards and remediation of common vulnerabilities on software and infrastructure;
- Previous experience in solution design principles, system development methodologies, and software lifecycles in a combination of system and application architectures;
- Good understanding of server management, virtualization, networking and systems management;
- Working knowledge with CNAAP solutions.
- Good understanding of automated security tooling in DevOps environment;
- Ability to review new IT solutions from a security perspective and document outcomes, exceptions and mitigations;
- Strong English communication skills (written/oral) required.
- Bachelor’s degree in IT, engineering or related;
- Active entry level security certification such as CompTIA Security+, Microsoft SC-900 (Security, Compliance, and Identity Fundamentals) or similar.
- Active entry level Cloud certification such as AZ-900: Microsoft Azure Fundamentals, AWS Certified Cloud Practitioner or similar.
- Minimum of 2 years of experience in security around any of the following areas: Cloud security, infrastructure security, software architecture design and application security;
- General knowledge of on-prem hosting technologies and Microsoft Azure hosting technologies;
- Knowledge of identity management, PKI solutions, log management and multifactor authentication tools;
- Knowledge of vulnerability management process and security assessment methodologies including penetration testing, SAST, DAST and SCA;
- Working knowledge of security standards and remediation of common vulnerabilities on software and infrastructure;
- Previous experience in solution design principles, system development methodologies, and software lifecycles in a combination of system and application architectures;
- Good understanding of server management, virtualization, networking and systems management;
- Working knowledge with CNAAP solutions.
- Good understanding of automated security tooling in DevOps environment;
- Ability to review new IT solutions from a security perspective and document outcomes, exceptions and mitigations;
- Strong English communication skills (written/oral) required.