Cyber-Security Operations Center Developer (IT-GOV-CSO-2023-66-GRAP)

Your responsibilities

The CERN Computer Security Team is mandated to protect the operations and reputation of the Organization against any kind of cyber-threat. CERN’s Security Operations Center (SOC) is daily collecting terabytes of monitoring and log information from dozens of different data sources, e.g. CERN’s outer perimeter firewall, its network- and host-based intrusion detection systems, login information, DNS requests, and automatically comparing that information against thousands of different indicators of compromise (e.g. malicious IP addresses, domain names) in order to detect abuses, security problems and infiltrations.

As a successful candidate you will take an active role in the further development and operation of this SOC:

• You will identify and integrate further log sources (e.g. from different vulnerability scanning tools as well as from Google Workspaces and MS Azure);
• You will streamline and optimize its analysis framework in order to reduce computation time and resource consumption;
• You will maintain and update the SOC infrastructure (e.g. move to Alma Linux 9, Python3);
• You will improve the web-platform notifying CERN’s end-users of breaches and other security issues.

Furthermore, we offer you the possibility to delve into pure security operations, penetration testing and performing forensics by contributing to incident handling in the CERN CSIRT.

More information here: https://cern.ch/security

Your profile

Skills and/or knowledge

• Excellent knowledge of the Linux/UNIX operating system, virtualization, databases, and in particular of shell scripting and programming (Python, and/or C), other languages or technologies would be a plus;
• Experience in the design of networks as well as knowledge of communication technologies and protocols;
• Experience in administration of computing systems as well as installation, operation and maintenance (preventive and corrective) of computing systems;
• Knowledge of best practises in the field of "computer security", of developing secure software and of, development and integration of IT security (features);
• Monitoring and responding to security threats and incidents for IT systems.
• Fluent in English, the ability to work in French would be an advantage.

Eligibility criteria:

• You are a national of a CERN Member or Associate Member State.
• You have a professional background in computer engineering or ideally in computer security (or a related field) and have either:
  • a Master’s degree with 2 to 6 years of post-graduation professional experience;
  • or a PhD with no more than 3 years of post-graduation professional experience.
• You have never had a fellow or graduate contract before.

Job closing date: July 27th 2023 at 12:00 AM (midnight) CET.

Job reference: IT-GOV-CSO-2023-66-GRAP

Contract duration: 24 months, with a possible extension up to 36 months maximum.

Target start date: 01-January-2024

What we offer

• A monthly stipend ranging between 6194 and 6808 Swiss Francs per month (net of tax).
• Coverage by CERN’s comprehensive health scheme (for yourself, your spouse and children), and membership of the CERN Pension Fund.
• Depending on your individual circumstances: installation grant; family, child and infant allowances; payment of travel expenses at the beginning and end of contract.
• 30 days of paid leave per year.
• On-the-job and formal training at CERN as well as in-house language courses for English and/or French.

About us

At CERN, the European Organization for Nuclear Research, physicists and engineers are probing the fundamental structure of the universe. Using the world’s largest and most complex scientific instruments, they study the basic constituents of matter - fundamental particles that are made to collide together at close to the speed of light. The process gives physicists clues about how particles interact, and provides insights into the fundamental laws of nature. Find out more on http://home.cern.

We are on a Quest. A Journey into discovery like no other. Bring your expertise to our unique work and develop your knowledge and skills at pace. Join world-class subject matter experts on unique projects, in a Quest for greater knowledge and deeper understanding.

Begin your CERN Quest. Take Part!

Diversity has been an integral part of CERN’s mission since its foundation and is an established value of the Organization. Employing a diverse workforce is central to our success.