Advanced Malware Protection BNP Paribas (#MITP)

GROUP BNP PARIBAS

BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines.

Spain IT Production

Spain IT Production organization consists of CIB ITO & ITG IT Platforms and is responsible for providing IT Production services to our Clients in EMEA, ensuring a Digital Market evolution, in a secured and performant environment, and with a reliable quality. IT Production organisation includes Infrastructure services, Digital Working, Telecom& Datacentres, Production Security and Application Production domains and associated transversal services (CTO Office, Control Tower, PMO and IT Continuity). In Spain, IT Production relies on a Platform with over 400 experts that provide full-stack support services ensuring a secure, stable, standardized, and efficient production.

ABOUT THE JOB

Context and Role summary

The “Production Security” Domain is part of the Corporate & Institutional Banking Information Technology & Operations (CIB ITO) of BNP Paribas. Within this domain, “Defense Team” has a relevant role.

Production Security and CyberDefense Teams are providing Security Services for CIB. Production Security is in charge of all the Security aspects linked to Production (=Protect Production; IAM, Network Security, CSIRT, DRP, DLP, Vulnerabilities …), whereas CyberDefense will identify weaknesses, perform Risk Assessment and PenTests.

The « Defense – AMP » Team is in charge of the following aspects for all infrastructures within CIB EMEA :

• Define, Pilot and administrate the security solutions such as Detection Probes, Sandboxes.
• Define and Pilot the evolutions linked to security solutions such as Email gateways, Web Proxies and Endpoint protection (AV and EDR).
• Create and follow evolution of the detection use cases that create alerts to the CIB EMEA PSIRT (Production Security Incident Response Team).
• Ensure the relevance of the security alerts sent to the CIB EMEA PSIRT.
• Following alerts, incident, security watch, redteam exercises, audit or pentests, be able to define and follow a remediation until closure.
• Misc.: Threat Intelligence, Monitoring, Project Management.

Professional Skills, Abilities and Experience

Essential:

• First experience in a large company (>6months) as PSIRT/CERT member role.
• Well-versed in security best practices.
• Strong technical background in IT security is necessary.
• Understanding of how an attack works.
• Customer service oriented skills.

Desirable:

• System administration skills (Linux/Windows Servers).
• Network administration background/knowledge.
• SQL, Microsoft SSRS (SQL Server Reporting Services).
• Scripting.

LANGUAGES

• High English spoken and written fluent (B2/C).
• French spoken and written will be valued.

QUALIFICATIONS

Bachelor in Computer Science or equivalent

ITIL Foundation certificate will be desirable

Others

On Site Services: From 9:00 to 18:00 schedule to cover in weekly shifts of 8 working hours/day

Public Holidays: Team members have to cover all public holidays except 1st January and 25th December (2 persons only in shifts)

BENEFITS

• Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.

• Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity).

• Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities.

• Flexible compensation plan

• Hybrid telecommuting model (50%)

• 31 vacation days

Diversity and Inclusion commitment

BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.