Computer Security Architect (IT-DI-CSO-2026-190-GRAE)

<p>As the successful candidate you will contribute to the CERN Computer Security Office by 1) maintaining, extending and developing extra functionality for its Security Operations Centre, i.e. the central hub for incident detection and response, and, 2) and in parallel, securing CERN's contracted external cloud services (i.e. AWS and Oracle cloud, but also reviewing Microsoft Azure, Microsoft 365, Google Cloud Platform and Google Workspace set-ups).</p><p><strong>Your responsibilities</strong></p><p>Your main tasks will include:</p><ul><li>Take an active role in maintaining, supporting, and extending the Computer Security Office's incident detection and response infrastructure (its "Security Operating Centre") based on open source technologies (e.g. "Zeek", OpenSearch, Apache Kafka, Kubernetes, "MISP").</li><li>Configure the IT department's newly contracted external cloud services (i.e. AWS, GCP, Azure and Oracle) such that their functionality and data maximally benefit from all relevant inherent security settings.</li><li>Review, in addition, the current security posture and configuration of CERN's existing Microsoft and Google SaaS cloud configurations.</li></ul><p>As side-tasks, you will have the opportunity to:</p><ul><li>Contribute to other computer security projects managed by the Office.</li><li>Providing advice and consultancy in matters of computer security, including performing penetration testing.</li></ul><p>More information <a href="https://cern.ch/security" rel="noopener noreferrer">here</a>.</p><p><strong>Your profile</strong></p><ul><li>Experience in design of networks as well as knowledge of communication technologies and protocols.</li><li>Experience in administration of computing systems as well as installation, operation and maintenance (preventive and corrective) of computing systems.</li><li>Experience in "computer security", secure configurations, security analysis and penetration testing, and, in particular, that of cloud services.</li><li>Ideally, but in addition, experience in monitoring and responding to security threats and incidents for ICT systems.</li></ul><p><u>Skills</u></p><ul><li>Excellent knowledge of the Linux/UNIX operating system, virtualisation, databases, and in particular of shell scripting and programming (Python, and/or C), other languages or technologies would be a plus.</li><li>Knowledge of cloud frameworks like Kubernetes.</li><li>Knowledge of best practises for developing secure software and of, development and integration of IT security (features), in particular in AWS, Google and MS cloud environments.</li><li>Spoken and written English, with a commitment to learn French.</li></ul><p><u>Eligibility criteria:</u></p><ul><li>You are a national of a <a href="https://home.cern/about/member-states" rel="noopener noreferrer">CERN Member or Associate Member State</a>.</li><li><strong><u>By the application deadline,</u></strong> you have a <strong>maximum of two years of professional experience since graduation</strong> in Computer Science (or a related field) <strong><u>and</u> your highest educational qualification is either a Bachelor's or Master's degree</strong>.</li><li>You have never had a CERN fellow or graduate contract before.</li><li>Applicants without University degree are not eligible.</li><li>Applicants with a PhD are not eligible.</li></ul>