Randstad→
Cyber Defense Engineer at Randstad in Portugal
Skills
Job Description
Are you our new colleague? We’re looking for a
cyber defense engineer
how you will contribute
Embark on a rewarding journey with Randstad's Global Security Operations Center (SOC) by stepping into the role of a Cyber Defense Engineer. In this pivotal position, you become an integral part of our expansive global network, actively contributing to SOC operations tailored to your designated time zone. Set within one of our three Cyber Defense Centers (CDC), you'll assume a central role in fortifying the security and resilience of Randstad's expansive digital landscape.
As a Cyber Defense Engineer, your primary mission is to safeguard Randstad and its operating companies by swiftly responding to potential threats. Given the strategic outsourcing of initial triage and routine tasks, your focus will be on tackling the more intricate cases that demand your analytical prowess and unwavering persistence. Beyond threat response, you will shoulder additional responsibilities, delving into other critical services provided by Randstad's SOC, such as threat intelligence, vulnerability management, threat modeling, and the pioneering of new detection capabilities.
In the dynamic and diverse environment of Randstad, we value cyber defense engineers with varying levels of experience. Whether you're a seasoned security engineer with a wealth of expertise or a recent graduate with a focus on Cyber Security, Randstad presents an opportunity tailored for you. Join us in shaping the future of cybersecurity within a globally renowned organization committed to excellence and innovation.
global key objectives
Global security operations, via regional Cyber Defense Centers (CDC), efficiently handing over incidents to be able to provide 24/7 service, using the follow the sun model.
Strategically allocate resources within the CDC team to maximize efficiency across various security capabilities, considering the outsourced services for initial triage and repeatable tasks.
Become a true global Security Operations Center, with regional presence and contacts.
Work closely with local security and IT stakeholders to integrate the global SOC seamlessly with the broader Randstad organization.
Closely collaborate with the cyber defense centers around the globe and act as one team.
Collaborate on the implementation of monitoring improvements, ensuring that the Global SOC remains proactive in identifying and mitigating security threats.
Provide regular and concise reports to relevant global, regional and local stakeholders, keeping them informed about the SOC's activities, incident trends, and security posture.
Ensure that Global SOC operations adhere to relevant global and local compliance standards and internal policies, maintaining a security posture fitting the largest HR services company in the world.
what you will be doing
- Perform thorough analysis of cybersecurity alerts, assuming complete responsibility for leading and concluding the investigation. Leveraging our strategic partnership with an external entity, initial triage has been completed, focusing your attention on investigating only the more complex and challenging alerts.
- Utilize cutting-edge technology for security investigations, such as EDR, SIEM, SOAR, and other advanced tools.
- Maintain a continuous communication loop with the outsourced staff of the frontline defense center and the external segments of the cyber defense center. This ensures alignment, facilitates the exchange of knowledge, and promotes a seamless and effective collaboration.
- As a member of the regional cyber defense center, your role is crucial in maintaining proximity to operating companies. You support local IT and ISOs by addressing security issues and translating necessary information for analysis and response into actionable tasks.
- Play a key role in enhancing the CDC's ongoing improvement. After conducting each investigation, engage in additional analysis of the incident. Proactively suggest new playbooks when relevant. This guarantees optimal efficiency for both the cyber defense center and the cyber defense frontline in carrying out their tasks.
- In the role of a cyber defense engineer, your daily responsibilities will extend to providing support for various operational tasks. During available time and depending on your skills and interests, you will aid the vulnerability management lead and the threat intelligence lead in their respective operations.
- You will work closely with the continuous improvement lead to design and develop new and improve existing threat detection capabilities. This involves contributing to the threat modeling program to identify gaps in security controls and specifying the necessary security controls and monitoring requirements.
- During critical security incidents, you'll join forces with the CSIRT to swiftly and decisively bring closure to these challenges, ensuring a resilient and secure environment.
who you will work with
The Global SOC comprises three regional Cyber Defense Centers (CDC). It falls within the Operations and Intelligence (O&I) department, which is part of the Global CISO office. The O&I department, in addition to overseeing the Global SOC, is accountable for CSIRT, threat intelligence, and vulnerability management.
You will collaborate closely with colleagues in your function. This includes working with architects and IT delivery colleagues in Global IT and the operating companies. The goal is to enhance Randstad's ability to detect, respond, and mitigate threats effectively.
As a cyber defense engineer you will report to the global head of security operations.
role related competencies
- Understanding of cybersecurity principles, threat landscape, and knowledge of various attack vectors. Having a CISSP or similar certification is considered a plus.
- Demonstrates robust analytical skills and effective problem-solving abilities to assess security events, evaluate risks, and make informed decisions during security investigations, ultimately ensuring the resolution of security incidents.
- Experience with industry-leading SIEM and EDR tools for the monitoring and analysis of security events.
- Basic understanding of network protocols, traffic analysis, and the ability to identify suspicious activities.
- Clear and concise communication skills to report incidents, write documentation, and interact with team members and technical and non-technical stakeholders.
- a basic understanding of the MITRE ATT&CK framework.
- Basic knowledge of scripting languages like Python are considered a plus.
general competencies
- Proficient in the English language
- Excellent analytical skills
- Ability to operate in a matrix organization
- Self-starting and self-supporting
- Hands-on approach
- Service-oriented mind-set
- Ability to work under pressure
- Likes to work in an international environment with different cultures
- Good communication skills
- Enthusiastic, pragmatic and results-driven
- Proficiency in other languages (helpful but not essential)
what’s in it for you
We put people at the heart of everything we do. Our employment conditions reflect this;
We want our teams and talent to reflect the rich diversity of the societies we serve. We thrive for an environment of belonging, safety and confidence. So everyone can bring their whole selves to work and flourish. Learn more about equity, diversity, inclusion and belonging at randstad here.
If you recognize yourself in the profile above or are willing to develop into it, we invite you to apply for this role. For more information you can reach out to our recruitment partner: jennifer.roberts@randstadsourceright.co.uk
The recruitment procedure consists of a screening and at least two interviews. Later in the process, an (online) assessment and a job offer conversation take place.