We are recruiting 3 Web Security Engineers for our customer in Brussels, Belgium (long-term assignments).

The Web Security squads within IT Middleware Services Tribe will work together with the existing Web Application Hosting, Web Design and Application Configuration squads for the technical design, installation, set-up, industrialization, management, support and documentation of the Web Security Infrastructure

Web Security Engineers to enforce the Web Securitization and Authentication squad

The mission has different aspects:

• • Design, deliver and support the integration layer between operating systems and business applications within distributed environments for Web information exchange solutions.

• • Focuses on the integration of web applications in the Web Infrastructure, for the intranet as well as for the DMZ.

• • Deploy and maintain a consistent and complex Web site infrastructure

• • Help to identify, recommend, and prioritize new Web features in conjunction with application developers and architects.

• • Ability to challenge new and existing solutions, architectures and defend it towards the interest of the bank (maintenance, costs, security,)

• • Identify reusable components required for Web Security and ensure the high quality of the service.

• • Share knowledge with colleagues on technology subjects, solutions, best practices on vendor specific and also on generic security components

• • Establish and document installations, guidelines, policies and procedures for relevant stakeholders.

• • Assist architects in order to perform cost-benefit analyses of proposed Web implementations, enhancements, and modifications.

• • Active participation in production support (incident, problem and change management) for the Web Security squad.

• • Set and enforce compatibility and interoperability standards that ensure site accessibility for all users.

• • Monitor and report on Web site traffic and performance.

• • Participate in the automation and industrialization of our assets

• • Participate in the On-Call calendar (7/7 from 18:00 – 7:30) Work on-site (3-4 days)

 

Language; Working proficiency oral and written

Technical Experience;

• • At least 3 years of experience in Web Security

• • A professional experience of at least 5 years, some in development.

 

Mandatory;

• • Solid and proven experience with following Web technologies:

• • TAMeB / ISAM (as from version 9)

• • Good and proven knowledge on: Web access management, Web authentication practices, SSL/TLS (and mutual auth.), SSO, Identity

• • Federation,

• • PKI, certificates, OpenID Connect, OAuth 2.0, SAML 2.0, External Authentication Interface on WebSEAL

• • Strong coding experience: Java, Python; JavaScript server side (Rhino JS) are example of used languages & Ability to understand and translate existing code sources (This is requirement for Web Security Dev Engineers)

• • Good knowledge on: XML/XSLT

• • Generic knowledge on: firewalls, application firewalls, load balancers, networks, DMZ, network security, anti-virus

• • Knowledge in web and application servers including Apache and WebSphere,

• • Experience with support on e-Commerce, intranet and extranet development

 

 

• • Experience with ISAM AAC and Federation modules is a big asset

 

Preferable

• • Security Token Service (STS) and/or TFIM experience + SOAP and WSTrust knowledge

• • Recent successful proven experience in similar/comparable scope

• • Strong experience in security of Web Infrastructure in financial services

• • Basic Shell scripting (automation of curl commands i.e)

• • Familiar with DevOps methodologies and container technologies such as Docker

• • Familiar with an agile environment

 

Business Experience

• • High awareness to risks related to the financial sector

• • Follows the defined processes for projects, incident and change management with high attention to business and financial impact

• • Experience with working in a complex organization.

• • Being standalone and team worker, analytical minded, meet commitment, ability to work in a dynamic and multi-cultural environment, flexible, customer-oriented

• • Ability to work in a fast-paced, agile environment and flexibility to accommodate demanding sprint schedules

• • Ability to work effectively with a wide range of constituencies in a diverse community

 

Preferable

• • Able to understand bank related business processes and assess impacts on business

• • Agile methodology

• • Devops

• • ITIL

 

Soft skill

• • Demonstrated team player with strong and effective customer care skills.

• • Demonstrated effective oral and written communicator to both management and technical staff

• • Quick self-starter, pro-active and innovative attitude.

• • Process-oriented with high attention to detail.

• • Good analytical and synthesis skills.

• • Autonomy, commitment and perseverance.

• • Ability to work in a dynamic and multicultural environment.

• • Flexibility (in peak periods extra efforts may be required).

• • Stress resistant

• • Open minded and show flexibility in self-learning new technologies/tools.