Loading...
Share this Job

CDI - COO - Cloud Security Specialist

Date: Jun 6, 2021

Location: Paris, FR

Company: SCOR

     EMEA     

Paris France (FR) 

|

CDI - COO - Cloud Security Specialist 

Permanent 

Information Technology 

 

 

          About SCOR         

SCOR, the 4th largest reinsurer in the world, provides insurance companies with a diversified and innovative range of solutions and services to control and manage risk. Using its experience and expertise, “The Art & Science of Risk”, SCOR provides cutting-edge financial solutions, analytics tools and services in all areas related to risk – in Life & Health insurance as well as in P&C insurance. Our specialist teams operate in over 120 countries, developing value added and innovative products and services and making long-term commitments to their clients, namely insurers and large corporations.
SCOR's aim, as an independent global reinsurance company, is to develop its Life and P&C business lines, to provide its clients with a broad range of innovative reinsurance solutions and to pursue an underwriting policy founded on profitability, supported by effective risk management and a prudent investment policy, in order to offer its clients an optimum level of security, to create value for its shareholders, and to contribute to the welfare and resilience of Society by helping to protect insureds against the risks they face.

 

- Department

IT Technical

The Information Systems Department (ISD) is composed of 166 people, organized around in 3 entities: Management & Control, Functional, Technical. It ensures the smooth operation, security and evolution of the Group's information system. With regards to its internal customers, it plays a role of service provider, project partner and innovation leader.

 

- Job Summary

This position is part of the Operational Security Team and will be the expert for Public Cloud related topics as well as traditional perimeter and internal technical security topics. The scope of responsibility includes services in global data centers from multiple cloud providers and offices located around the world as well as the dedicated SCOR network and associated sites. The role requires mastery of our current on premise security and cloud based infrastructure as well as assisting with improvements and enhancements for future improved versions. Sharing knowledge with existing and future team members is also a critical component.

Additionally, being comfortable on network related topics, technical project management, and communication with counterparts - in fluent French and English -, you will be involved with network and endpoint security subjects, helping the team to face the daily production run state, work on operational security projects, and also participating in projects coming from the IT Functional and Technical teams.

 

- Key duties and responsibilities

Context

The Operational Security Team maintains a globally distributed infrastructure of security components including firewalls, VPNs, web proxies, WAF, and DNS Firewall. The team also supports endpoint security including Antivirus, EDR, and DLP services that assist in providing a secure operating environment for our business teams, partners, clients, and vendors to utilize in the execution of SCOR business interests.

Responsibilities

On a worldwide level and in conjunction with the IT Technical, Functional, and M&C Teams, the role is responsible for :

Operate day-to-day operations and maintain security systems:

  • Build, run and improve public cloud environement
  • Develop automation scripts and tools
  • Maintenance in operational conditions
  • Manage access filtering rules
  • Protect SCOR internal assets from potential threats
  • Content filtering and data protection (Proxy, Web Application Firewall, DLP)
  • Mobility and remote access (IPSEC VPN Connections)
  • Intrusion detection (IPS/IDS, forensics analysis)
  • Malware fight (antivirus policy, multilayer posture)
  • Qualify and response to discovered threats (SOC/M&C)
  • Other duties as prescribed by management

Evolution & upgrade of tools :

  • Permanent search for continuous improvement and systems reliability
  • Intervention during project specification steps
  • Integration and validation of security solutions
  • Documentation: Creation, maintenance, and redaction of technical documentation as requested by management
  • Technical support and training
  • Reporting of the activity and safety reports production
  • Anomaly detection and treatment of incidents through appropriate action plans
  • Ensure the implementation of processes and update information on your perimeter

 

- Required experience and competencies

Exeprience

10 or more years of related work experience

Technical Skills

  • Cloud: Azure infrastructure, AWS, Alibaba
  • Firewalls: Palo Alto Technologies
  • Proxy/URLF: Forcepoint, Palo Alto
  • Endpoint security: McAfee EPO, ATP Defender
  • Extensive knowledge of WAN And LAN operations
  • Extensive knowledge of network protocols

Soft skills

  • Technical project management
  • Communication skills
  • Proactive
  • Documentation