We are recruiting on behalf of our client an Operational Security Consultant for a freelance mission: 

Key responsibilities:

✓ Support to the CISO on information security projects (organizational, technical & technological);

✓ Monitoring of various security projects with service providers;

✓ Implementation of technical action plans (audit recommendations, secure configuration and parameterization…);

✓ Supervision & operational monitoring of Information Systems Security;

✓ Monitoring the proper functioning of IS security solutions;

✓ Conducting technical audits (penetration tests, vulnerability scans, secure configuration) and monitoring outsourced technical audits;

✓ Security supervision with SIEM, EDR & existing security tools;

✓ Preparation and reporting of security dashboards for management;

✓ Support to the external SOC team: alert investigation, writing internal incident reports, remediation action plans...;

✓ Monitoring of ISMS compliance actions and its improvement;

✓ Support in monitoring compliance with best practices in IT projects (upstream of the project, during and downstream);

✓ Monitoring of annual BCP test actions;

✓ Backup and recovery management;

✓ Contribution to the definition of secure architectures (networks, servers, cloud);

✓ Processing of network flow opening requests;

✓ Accompanying IT teams in integrating security into projects;

✓ Technical watch in information security

Required profile:

Holding a minimum of a Master's degree (Bac+4), you have more than 4 years of experience in information systems security. Passionate about information security and its technologies. Possessing good interpersonal skills and a good sense of organization, autonomy, rigor, and reactivity. Able to manage priorities and pressure in a dynamic and competitive environment.

With general skills including:

✓ Good knowledge and skills in networking and security;

✓ Knowledge of systems (Windows, Linux, …), databases, and programming languages;

✓ Good skills in managing and operating certain security solutions (Firewalling, WAF, SIEM, NAC, PAM, DAM, IAM, …) – certifications are a plus;

✓ Knowledge of security auditing according to international standards (ISO27001, OWASP, SANS, …);

✓ Project monitoring and vendor management;

✓ Good level of technical English;

✓ Proficiency in security tools (Nessus, Qualys, Splunk, CrowdStrike, etc.);

✓ In-depth knowledge of systems, networks, cloud, and application security;

✓ Ability to analyze and remediate technical vulnerabilities (patch deployment, compensating controls, …);

✓ Experience in incident response and forensics desired.

▪ Mission duration: 06 months, potentially renewable twice

▪ Intervention mode: On-site in Casablanca