Senior Security Consultant at ARHS in Luxembourg

Company Description

Arηs Group, Part of Accenture, specializes in the management of complex public/private sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development.

Arηs Group was acquired by Accenture in July 2024.

Job Description

We are looking for an experienced Senior Security Consultant to contribute to securing complex enterprise and cloud-native environments.

In this role, you will focus on infrastructure and cloud security, with particular emphasis on web proxy solutions, OpenShift/Kubernetes security, service mesh technologies, and Infrastructure as Code (IaC). You will work closely with architecture, infrastructure, and application teams to assess security risks, strengthen existing solutions, and ensure that security best practices are embedded throughout the technology lifecycle.

The ideal candidate is a hands-on security expert who can work autonomously, challenge technical designs, and provide pragmatic security recommendations aligned with business and operational requirements.

Key Responsibilities

• Design, implement, configure, and harden web proxy solutions in complex enterprise environments.

• Secure and support OpenShift/Kubernetes platforms, ensuring compliance with security best practices.

• Implement and manage service mesh technologies, such as Istio and Red Hat Service Mesh, including traffic management, mutual TLS (mTLS), and security policy enforcement.

• Develop and maintain Terraform-based Infrastructure as Code (IaC) solutions to automate secure infrastructure provisioning and configuration.

• Assess and strengthen API security, network segmentation, certificate lifecycle management, and secrets management.

• Conduct security assessments, identify vulnerabilities and misconfigurations, and define appropriate remediation plans.

• Apply cloud-native security, container security, DevSecOps, and identity and access management (IAM) principles.

• Collaborate with architects, infrastructure specialists, and application teams to integrate security into technical designs and delivery processes.

• Provide expert guidance on security architecture, risk mitigation, and the implementation of pragmatic security controls.

Qualifications

• 
  At least 5 years of professional experience in cybersecurity, infrastructure security, or cloud security within enterprise environments.

• Strong hands-on experience with web proxy configuration, deployment, troubleshooting, and security hardening.

• Proven experience securing and operating OpenShift/Kubernetes platforms.

• Practical experience with service mesh technologies, particularly Istio or Red Hat Service Mesh.

• Proficiency in Terraform and Infrastructure as Code (IaC) practices.

• Solid knowledge of API security, network segmentation, certificate management, and secrets management.

• Experience performing security assessments, vulnerability analysis, and remediation planning.

• Strong understanding of DevSecOps, container security, identity and access management, and cloud-native security principles.

• Experience working with multiple technical teams in complex enterprise environments.

Nice to Have

• Previous experience in financial services, banking, or other highly regulated environments.

• Knowledge of Zero Trust architectures and cloud security frameworks.

• Familiarity with security monitoring, logging, SIEM integration, and regulatory compliance requirements.

Key Competencies

• Senior-level expertise and the ability to drive security initiatives independently, with minimal supervision.

• Strong analytical and problem-solving skills.

• Excellent communication and stakeholder management skills.

• Ability to challenge existing designs constructively and recommend effective, pragmatic security solutions.

• A proactive mindset, with a strong focus on security, operational resilience, and continuous improvement.

Additional Information