The posting
Description de tâches:Permanent contract | BelvalAre you passionate about research? So are we! Come and join us The Luxembourg Institute of Science and Technology (LIST) is a leading Research and Technology Organisation (RTO) that drives innovation for the economy and society in Luxembourg and beyond. With cutting-edge expertise in Natural, Built, Industrial environments, Space, AI, Security and defence technologies. LIST bridges scientific excellence and applied research to design solutions that address real-world challenges and create positive impact. Do you want to know more about LIST? Check our website: <a href="https://www.list.lu" target="_blank" rel="nofollow">https://www.list.lu</a>/ How will you contribute?· Configure, manage, and optimize enterprise firewalls, including rule sets, NAT policies, network segmentation, and access control lists to ensure secure and efficient network traffic flow· Deploy, administer, and tune Web Application Firewalls (WAF) to protect web services against threats· Implement and enforce network security policies, segmentation strategies, and access control mechanisms aligned with organisational security standards and based on the architecture / technology definition from the IT infrastructure team· Monitor firewall, WAF, network and general infrastructure for pro-active detection of suspicious activities, potential threats, or incoming incident and manage them in collaboration with other teams or team members· Support incident response activities by analysing network traffic, Firewall, WAF, or an observability tool to help implementing remediation measures· Conduct vulnerability assessments of network infrastructure and exposed services, ensuring timely remediation of identified weaknesses· Maintain and review firewall and WAF configurations to ensure compliance with organisational policies, security frameworks, and regulatory requirements· Develop and maintain logging, monitoring, and alerting mechanisms to support security auditing and incident detection· Generate security reports, maintain audit trails, and support internal or external security audits when required· Collaborate with system administrators, application and development teams and research organisation to design and implement secure infrastructure and application architectures including network, network security and observability· Support the integration of network, network security or observability tools and solutions within on-premises and cloud environments· Participate in network security improvement initiatives, including automation, infrastructure hardening, micro‑segmentation, and zero‑trust approaches· Document network security configurations, operational procedures, and incident handling processes· Stay current with emerging threats, vulnerabilities, network security & observability technologies, and propose improvements to strengthen the organisation's network, network security & observability posture Is Your profile described below? Are you our future colleague? Apply now!Education· Bachelor's degree in computer science, Information Technology, or a related field· Minimum of 5-7 years of experience in network administration, network security, or infrastructure security roles· Hands-on experience configuring and managing enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point, Cisco, or similar platforms)· Experience deploying and managing Web Application Firewalls (WAF) such as F5, Cloudflare, etc.· Strong understanding of network protocols and technologies including TCP/IP, VPNs, DNS, routing, VLANs, and load balancing· Experience with network monitoring, logging, and SIEM tools for security analysis and incident investigation· Knowledge of vulnerability management practices and security assessment tools· Familiarity with cloud networking and security controls in environments such as AWS, Azure, or Google Cloud is an advantage· Understanding of common web application attack techniques and mitigation strategies aligned with OWASP guidelines· Experience working in environments with high availability requirements and strong security controls· Knowledge of infrastructure security principles across Linux and Windows environments is beneficial· Familiarity with compliance frameworks or standards (e.g., ISO 27001, NIST, CIS benchmarks, or similar) is considered a plus · Familiarity with F5, Palo Alto, Cisco and any Observability solutions is considered as a plus. Language skills· Fluent level (both oral and written) in English and French (an asset) Your LIST benefits· An organization with a passion for impact and strong RDI partnerships in Luxembourg and Europe that works on responsible and independent research projects· Sustainable by design, empowering our belief that we play an essential role in paving the way to a green society· Innovative infrastructures and exceptional labs occupying more than 5,000 square metres, including innovations in all that we do· An environment encouraging curiosity, innovation and entrepreneurship in all areas· Personalized learning programme to foster our staff's soft and technical skills· Multicultural and international work environment with more than 60 nationalities represented in our workforce· Diverse and inclusive work environment empowering our people to fulfil their personal and professional ambitions· Gender-friendly environment with multiple actions to attract, develop and retain women in science· 32 days' paid annual leave, 11 public holidays, 13-month salary, statutory health insurance· Flexible working hours, home working policy (not remote) and access to Digital lunch vouchersApply onlineYour application must include:· A motivation letter oriented towards the position and detailing your experience· A CV with contact details· Contact details of 2 referencesPlease apply ONLINE formally through the HR system. Applications by email will not be considered.Application procedure and conditionsWe kindly request applicants to provide their nationality for statistical purposes only, as part of our commitment to promoting diversity and ensuring equal opportunities in our workforce. This information will be kept confidential and will not be used for any discriminatory purposes.LIST is dedicated to maintaining an inclusive work environment and is an equal opportunity employer. We are committed to attracting, hiring, and retaining a diverse workforce. All applicants will be considered for employment without discrimination based on national origin, race, ethnicity, gender, sexual orientation, gender identity, marital status, religion, age, or disability.Applications will be continuously reviewed until the position is filled. An assessment committee will thoroughly evaluate applications, adhering to guidelines designed to ensure equal opportunities. The primary criteria for selection will be the alignment of the applicant's existing skills and expertise with the requirements mentioned above.As part of our recruitment process, the selected candidate might be subject to a background check in accordance with applicable laws and institutional policies. Further checks and restrictions might apply to candidates in compliance with export controls requirementsFor the purposes of the position and in accordance with applicable legislation, the successful candidate may be requested to provide a recent criminal record certificate.
