Computer Security Architect

Job Posting Organization:
CERN, the European Organization for Nuclear Research, was established in 1954 and is one of the world's largest and most respected centers for scientific research. With over 2,500 employees and a diverse community of scientists and engineers from around the globe, CERN operates in multiple countries and is dedicated to pushing the frontiers of science and technology. The organization is known for its groundbreaking work in particle physics and its commitment to fostering an inclusive environment where innovation and collaboration thrive. Diversity is a core value at CERN, and it plays a crucial role in the organization's mission to explore the fundamental structure of the universe.

Job Overview:
The Computer security" style="border-bottom: 1px dotted #007bff !important;">Security Architect position at CERN is a critical role within the Computer Security Office, focusing on enhancing the security posture of CERN's IT infrastructure. The successful candidate will be responsible for maintaining and developing the Security Operations Centre, which serves as the central hub for incident detection and response. This role also involves securing CERN's contracted external cloud services, including AWS, Oracle Cloud, and reviewing configurations for Microsoft Azure, Microsoft 365, Google Cloud Platform, and Google Workspace. The position requires a proactive approach to security, ensuring that all cloud services are configured to maximize security benefits while supporting the organization's operational needs. The candidate will also have the opportunity to contribute to various computer security projects and provide consultancy on security matters, including penetration testing.

Duties and Responsibilities:
The main duties and responsibilities of the Computer Security Architect include:

• Actively maintaining, supporting, and extending the incident detection and response infrastructure of the Computer Security Office, utilizing open-source technologies such as Zeek, OpenSearch, Apache Kafka, Kubernetes, and MISP.
• Configuring external cloud services (AWS, GCP, Azure, and Oracle) to ensure optimal security settings are in place.
• Reviewing and enhancing the security posture of existing Microsoft and Google SaaS cloud configurations.
• Contributing to other computer security projects managed by the Office.
• Providing expert advice and consultancy on computer security matters, including conducting penetration testing.
• Collaborating with cross-functional teams to ensure security best practices are integrated into all IT operations.

Required Qualifications:
Candidates must possess a strong background in network design and communication technologies, along with experience in the administration of computing systems. A solid understanding of computer security principles, secure configurations, security analysis, and penetration testing is essential, particularly in relation to cloud services. Experience in monitoring and responding to security threats and incidents for ICT systems is highly desirable. Candidates should also demonstrate excellent knowledge of Linux/UNIX operating systems, virtualization, databases, and proficiency in shell scripting and programming languages such as Python or C. Familiarity with cloud frameworks like Kubernetes and best practices for developing secure software is also required.

Educational Background:
Applicants must hold a Bachelor's or Master's degree in Computer Science or a related field. Candidates without a university degree are not eligible for this position, and those with a PhD will also be disqualified. The ideal candidate will have graduated within the last two years and possess a maximum of two years of professional experience since graduation.

Experience:
The position requires candidates to have a maximum of two years of professional experience in the field of computer science or a related area. This experience should ideally include work related to computer security, secure configurations, and cloud services. Candidates should have a demonstrated ability to apply their knowledge in practical settings, particularly in relation to incident detection and response.

Languages:
Fluency in spoken and written English is mandatory, as it is the primary language of communication at CERN. Candidates should also be committed to learning French, which is beneficial for integration into the local community and workplace.

Additional Notes:
The position is a full-time role with a contract duration of 24 months, with the possibility of extension up to a maximum of 36 months. The working hours are set at 40 hours per week, and the job offers a hybrid flexibility model. The target start date for this position is October 1, 202

• The role may require stand-by duty and work during nights, Sundays, and official holidays as needed by the organization. The compensation includes a monthly net stipend ranging from 5,266 to 5,793 Swiss Francs, depending on the candidate's degree, along with 30 days of paid leave per year, comprehensive health insurance coverage, and various allowances based on individual circumstances.