Cybersecurity Specialist / Administrator (Warsaw, 50% remote) – Frontex

Profile: Cybersecurity Specialist / Administrator - Level Advanced.

Place of performance: On-site service provision - Frontex Headquarters – 50% on-site + 50% remote.

Duration of the mission: 48 months.

Security Clearance: Is required (valid from the first day of assignment) - RESTREINT UE/EU RESTRICTED.

Minimum level of education: Level 6.

Minimum English language skills: B2.

Minimum IT relevant experience: 8 years (5 years in relevant roles).

Award Criteria: 35% Price / 65% Quality.

Minimum required scoring for interview: 70%.

Travel expenses: Not foreseen.

Rate: 460-483€/day NWH; 600-628€/day EWH; 12,40€/hour OnC.

· NWH: 230days x4 years

· EWH: 12days x4 years

· OnC: 1000h x 4 years

Required technical certificates:

At least 3 certifications are required among:

· GCED (GIAC Certified Enterprise Defender) or equivalent.

· GPPA (GIAC Certified Perimeter Protection Analyst) or equivalent.

· GCWN (GIAC Certified Windows Security Administrator) or equivalent.

· GCUX (GIAC Certified UNIX Security Administrator) or equivalent.

· GCCC (GIAC Certified Critical Controls) or equivalent.

· SSCP ((ISC)2 Certified Systems Security Practitioner) or equivalent.

· CCSP (ISC2 Certified Cloud Security Professional) or equivalent.

· CISSP (Certified Information Systems Security Professional) or equivalent.

· CSSLP (ISC2 Certified Secure Software Lifecycle Professional) or equivalent.

· GSEC (GIAC Certified Security Essentials) or equivalent.

· ECSA (EC-Council Certified Security Analyst) or equivalent.

· SCPO (SABSA Certified Security Operations & Service Management Practitioner) or equivalent.

· ECSA (EC-Council Certified Security Analyst) or equivalent.

· Note: each equivalent alternative means certification recognized internationally (subject and scope to acceptance by Frontex as a valid credential).

Knowledge and Skills

· GCED (GIAC Certified Enterprise Defender) or equivalent.

· GPPA (GIAC Certified Perimeter Protection Analyst) or equivalent.

· GCWN (GIAC Certified Windows Security Administrator) or equivalent.

· GCUX (GIAC Certified UNIX Security Administrator) or equivalent.

· GCCC (GIAC Certified Critical Controls) or equivalent.

· SSCP ((ISC)2 Certified Systems Security Practitioner) or equivalent.

· CCSP (ISC2 Certified Cloud Security Professional) or equivalent.

· CISSP (Certified Information Systems Security Professional) or equivalent.

· CSSLP (ISC2 Certified Secure Software Lifecycle Professional) or equivalent.

· GSEC (GIAC Certified Security Essentials) or equivalent.

· ECSA (EC-Council Certified Security Analyst) or equivalent.

· SCPO (SABSA Certified Security Operations & Service Management Practitioner) or equivalent.

· ECSA (EC-Council Certified Security Analyst) or equivalent.

· Note: each equivalent alternative means certification recognized internationally (subject and scope to acceptance by Frontex as a valid credential)."

· Document, report present and communicate with various stakeholders.

· Integrate cybersecurity solutions to the organisation’s infrastructure.

· Configure solutions according to the organisation’s security policy.

· Assess the security and performance of solutions.

· Develop and test secure code and/or scripts.

· Identify and troubleshoot cybersecurity-related issues.

· Excellent communication skills.

· Analytical mind, attention to details and an ability to pick things up quickly; problem solving skills.

Specific requirements

· Experience in PKI operations.

· Experience in the operations and maintenance of security monitoring platforms (Splunk, Sentinel, Darktrace).

· Experience in operations of risk-based vulnerability management services (with Tenable) including penetration testing coordination.

· Experience in deploying and managing PAM platforms.

· Experience in application security testing with CheckMarx SAST and DAST.

· Experience in implementation controls alligned with Zero Trust Architecture.

Tasks and Responsibilities

· Provide cybersecurity related support to users and/or customers.

· Integrate cybersecurity solutions and ensure their sound operation.

· Securely configure systems, services and/or products.

· Maintain and upgrade the security of systems, services and/or products.

· Implement cybersecurity procedures and controls.

· Monitor and assure the performance of the implemented cybersecurity controls.

· Document and report on the security of systems, services and/or products.

· Work close with the IT personnel on cybersecurity related actions.

· Implement, apply and manage patches to products to address technical vulnerabilities.

· Provides support in defining, designing, and implementing security related to IT systems.

· Assists in the support of security technologies such as user access, Internet filtering, email security, antivirus, data loss protection, document management, forensics, vulnerability assessments, collaboration technologies and mobile platforms, cloud security.

· Actively participates in information security reviews and audits.

· Updates the technical documentation and operating procedures.

· Monitors security systems, responds to events and alerts.

· Recommends & evaluates security tools to identify improvements in security measures.

· Implements security related changes according to ICT change management procedures.

· Design, develop, install, configure, test, monitor, maintain, troubleshoot and upgrade cyber security infrastructure.

· Provide expertise, guidance, recommendations and documented security configurations for implementation of security tools and processes.

· Evaluate and recommend secure configurations.

· Identify security requirements, based upon need or translate high-level security requirements into detailed technical requirements.

· Support various technical and non-technical stakeholders to specify and negotiate security requirements.

· Interact with network and system engineering teams to effectively communicate and develop security solutions.

· Drafts documentation and standard operational procedures to support security systems operations.

· Ensures the technical design and contributes to implementation of new components and/or enhancements in coordination with other team members in particular project managers, security architects and engineers.

· Ensure service continuity for the managed components to defined SLAs.

· Investigate, diagnose and solve cybersecurity system related problems.

· Diagnose and solve problems and faults occurring in the operation of cyber security components.

· Document cyber defence components configurations.