Data Security - Network Intrusion (#SITP)

GROUP BNP PARIBAS

BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines.

SPAIN IT PRODUCTION

Spain IT Production organization consists of CIB ITO & ITG IT Platforms and is responsible for providing IT Production services to our Clients in EMEA, ensuring a Digital Market evolution, in a secured and performant environment, and with a reliable quality. IT Production organisation includes Infrastructure services, Telecom & Workspace, Production Security and Application Production domains and associated transversal services (CTO Office, Control Tower, PMO and IT Continuity). In Spain, IT Production relies on a Platform with over 400 experts that provide full-stack support services ensuring a secure, stable, standardized, and efficient production.

ABOUT THE JOB

MISSION

For our Network Intrusion and Data Protection Team, we are looking for an L2 operational Security Engineer for Intrusion Detection System, Intrusion Prevention System, Sandboxing and Secure Messaging activities.

RESPONSIBILITIES

The main activities and missions per perimeter will be:

IDP/IPS :
RUN :
Analysis of security events
Adjustment of security profile deployed on the device
Create ticket to CSIRT team when suspicion of security event with impact
On-call duty across the team
BUILD :

• Upgrade of the solution and associated tests
• Participation on deployment of new perimeter
• Understanding of the architecture and anticipation of the specificities of the perimeter
• Initial finetuning of the policy
• Follow up until all false positives are solved
• Communications and activation of blocking mode
• Follow-up of new security needs on IPS device (Forbidden protocols, AMP, zone filtering…)

SANDBOXING :
RUN :
Analysis of retrospective security event
User support on suspicion of false positives
On-duty call across the team
BUILD :
Upgrade of the solution and associated tests
Support and implementation on yara rules (created by CSIRT teams)
Study of new functionalities
SECURE MESSAGING
RUN :
Implementation of user certificate requested

• Implementation of generic mailbox requested by email

Eventual study of customer need with a micro-project
LSS of the application and servers
On-call duty across the team

REQUIREMENTS

Studies

Master’s degree or equivalent

Experience

At least 5 years

Languages

High Level of English (written / spoken).

French speaking will be appreciated.

SKILLS

Technical

IPS Technology, in particular Palo alto

Transversal & Behavioral

• Critical mind, good analytical and synthesis skills.
• Rigor, curiosity, autonomy, involvement, availability and taste for teamwork.

BENEFITS

• Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.
• Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity).
• Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities.
• Flexible compensation plan.
• Hybrid telecommuting model (50%).
• 31 vacation days.

DIVERSITY AND INCLUSION COMMITMENT

BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.