We are recruiting on behalf of our client an Operational Security Consultant for a Freelance mission: 

Main missions:

✓ Support to the CISO on information security projects (organizational, technical & technological);

✓ Monitoring of various security projects with service providers;

✓ Implementation of technical action plans (audit recommendations, secure configuration and parameterization…);

✓ Supervision & operational monitoring of Information Systems Security;

✓ Monitoring the proper functioning of IS security solutions;

✓ Conducting technical audits (penetration tests, vulnerability scans, secure configuration) and monitoring outsourced technical audits;

✓ Security supervision with SIEM, EDR & existing security tools;

✓ Development and reporting of security dashboards for management;

✓ Support to the external SOC team: alert investigation, writing internal incident reports, remediation action plans...;

✓ Monitoring of ISMS compliance actions and its improvement;

✓ Support in monitoring compliance with best practices in IT projects (upstream, during and downstream of the project);

✓ Monitoring of annual BCP testing actions;

✓ Management of backup and recovery;

✓ Contribution to the definition of secure architectures (networks, servers, cloud);

✓ Processing of flow opening requests;

✓ Supporting IT teams in integrating security into projects;

✓ Technical watch in information security

Profile sought:

Holding a minimum of a Master’s degree (Bac+4), you have more than 4 years of experience in information systems security. Passionate about information security and its technologies. Possessing good interpersonal skills and a good sense of organization, autonomy, rigor and reactivity. Able to manage priorities and pressure in a dynamic and competitive environment.

With general skills such as:

✓ Good knowledge and skills in networking and security;

✓ Knowledge of systems (Windows, Linux, …), databases and programming languages;

✓ Good skills in the management and operation of certain security solutions (Firewalling, WAF, SIEM, NAC, PAM, DAM, IAM, …) – certifications are a plus;

✓ Knowledge of security auditing according to international standards (ISO27001, OWASP, SANS, …);

✓ Project monitoring and vendor management;

✓ Good level of technical English;

✓ Mastery of security tools (Nessus, Qualys, Splunk, CrowdStrike, etc.);

✓ In-depth knowledge of systems, networks, cloud and application security;

✓ Ability to analyze and correct technical vulnerabilities (patch deployment, palliative measures, …);

✓ Experience in incident response and forensics desired.

▪ Mission duration: 06 months, potentially renewable twice

▪ Intervention mode: On-site in Casablanca