ITG Vulnerability Management BNP Paribas (#MITP)

Employment contract:

Standard / Permanent

Location:

Madrid, Community of Madrid, Spain

Job/mission:

INFORMATION TECHNOLOGY

Reference:

BNP-001093

Service Overview

The service of Production Security provides all necessary resources to ensure the correct and efficient deployment, administration and support of operational security solutions and tools on network, server and endpoint infrastructures for business areas operated by ITG.

 

Vulnerability Management team provides a global service of internal scan on all the eligible Assets into BNPP group CMDB (OS, MW, Network, Appliance).

Vulnerability Scan service is a prerequisite for all asset creation / validation process.  

 

Technical scopes are:

  • Scanning Tools (Qualys & Tanium Comply)
  • Master OS Homologation (Windows / RHEL)
  • OVA Homologation

 

Missions & TAsks

  • Responses to SNOW ticketing regarding On Demand Scan requests
  • Responses to SNOW ticketing regarding OVA Homologation requests
  • Responses to SNOW ticketing regarding SHA Homologation requests
  • Publishing KPI / dashboards
  • Continuous improvement of Scan process and exceptions management regarding Homologations

 

Skills

 

Technical Essentials

  • CVE Analyses
  • Vulnerability Management skills
  • Scanning tool experience
  • Good culture of Cloud solutions (IaaS, PaaS, Saas)
  • Global IT culture (Application security, Environments)

 

 

Background

  • Fluent English written and spoken. Strong written, oral, and interpersonal communications skills
  • French is a plus
  • Bachelor in Computer Science or equivalent
  • Minimum 2 to 4 years experience in cybersecurity and production environments
  • Client Focus
  • Capable of communicating
  • Experience as SPOC for technical escalations
  • Cybersecurity certifications
  • Ability to coordinate with offshore teams; interface with customers, vendors and partners for issue resolution.

 

 

Capabilities

  • Available for On Site Services: 09:00 to 18:00 regular/variable schedule range