At HAYS we are collaborating with one of the largest international banking networks. With a presence in 72 countries, with more than 190,000 professionals, the Group holds key positions in various banking and financial services activities, structured around three main operating divisions: Commercial Banking, Personal Banking and Services, Investment and Protection Services, and Corporate and Institutional Banking. It provides a wide range of innovative solutions tailored to the needs of its diversified customer base.

They have a solid diversified and integrated model and helps its clients to realize their projects through financing, investment, savings and insurance solutions. To this end, they have platforms and different lines of business in Europe, a strong international presence especially in the Americas, as well as a solid and fast-growing business in Asia-Pacific.

We are looking for an Security Log Collection Consultant on a stable computer and collaborate in the achievement of your goals.

What will your Tasks & Key Responsibilities be?

• Maintain (upgrade, monitor, troubleshoot) the log collection infrastructure (SIEM, Arcsight, logstash, linux)
• Improve the log collection infrastructure when possible.
• Deploy (sometimes massively) new collectors. Scripting (shell, ansible) will have to be used.
• Ensure (automatically) all the logs are collected and provide evidences (coverage reports) and remediate to the gap identified.
• Participate in the log collection architecture design.
• Onboard new logs. This includes opening flows, ordering and building servers, chasing other productions or applications teams, etc.
• Coordinate with production and applications teams involved in the log collection process.
• Document the log collection project: infrastructure, procedures, troubleshooting, reporting, etc.
• Train CSIRT Analyst to act as backup for troubleshooting log collection issues.
• Participate in security incident handling when a task force is required.
• Propose security use cases and ensure appropriate logs are collected.

What are the requirements for the position?

The “Production Security” Domain is part of the Corporate & Institutional Banking Information Technology & Operations (CIB ITO) of BNP Paribas. Within this domain, “CSIRT Audit and Monitoring” has a relevant role.

Production Security and CyberDefense Teams are providing Security Services for CIB. Production Security is in charge of all the Security aspects linked to Production (=Protect Production; IAM, Network Security, CSIRT, DRP), whereas CyberDefense will identify weaknesses, perform Risk Assessment and PenTests.

The security log collection expert is part of the Production Security Team. She/he is in charge of maintaining andimproving the security log collection infrastructure, ensure all logs are collected and provide reports about log collection.

Essential:

• Experience in managing production security tool infrastructure for a large company (>3 years)
• Linux administration experience
• SIEM administration experience (Arcsight, logstash, elasticsearch)
• Background/concepts in IT security

Desirable:

• System administration skills (Linux/Windows Servers)
• Network administration background/knowledge
• SQL
• Scripting shell, ansible
• Monitoring tools (Nagios)
• ETL

What do we offer?

• Hybrid modality.
• Located in Madrid.
• Stable and long-term project.

We are waiting for profiles like yours, passionate about technology and who want to take on a new challenge. If this is your case, sign up for the offer so we can tell you more!