Business Overview The BNP Paribas Group is one of the largest international banking networks, with a presence in 72 countries. The organisation is an international financial services group, with in excess of 202,000 employees with solid roots in Europe, a significant and growing presence in the Americas as well as a solid and fast-growing business in Asia-Pacific.
The BNP Paribas Group is organised around two main activities: Retail Banking & Services and Corporate & Institutional Banking (CIB).
BNP Paribas works daily with all its stakeholders to create an environment that is respectful of everyone, based on equality, and where fighting discrimination represents a primary goal. Our teams in CIB ITO Production strongly supports these values, and in particular aims at increasing women's representation, as well as maintaining an inclusive workplace. Women are a valuable asset for our organization, and we strongly encourage them to join our professions. We will always keep a close and mindful watch on discrimination, but also to challenge the unconscious bias and stereotypes.
MADRID IT Platform The CIB IT Platform for EMEA is responsible to provide IT Services to our Clients ensuring a Digital Market evolution, in a secured and performant environment, and with a reliable quality. This function includes Global Markets Application Production, Local Territory IT Development, the Core Infrastructure environment including Datacentres, Application Production, Security, Architecture as well as elements of the Global Services organisation.
Context and Role summary The "Production Security" Domain is part of the Corporate & Institutional Banking Information Technology & Operations (CIB ITO) of BNP Paribas. Within this domain, "Defense Team" has a relevant role.
Production Security and CyberDefense Teams are providing Security Services for CIB. Production Security is in charge of all the Security aspects linked to Production (=Protect Production; IAM, Network Security, CSIRT, DRP, DLP, Vulnerabilities …), whereas CyberDefense will identify weaknesses, perform Risk Assessment and PenTests.
The « Defense – AMP » Team is in charge of the following aspects for all infrastructures within CIB EMEA :
Define, Pilot and administrate the security solutions such as Detection Probes, Sandboxes. Define and Pilot the evolutions linked to security solutions such as Email gateways, Web Proxies and Endpoint protection (AV and EDR). Create and follow evolution of the detection use cases that create alerts to the CIB EMEA PSIRT (Production Security Incident Response Team). Ensure the relevance of the security alerts sent to the CIB EMEA PSIRT. Following alerts, incident, security watch, redteam exercises, audit or pentests, be able to define and follow a remediation until closure. Misc.: Threat Intelligence, Monitoring, Project Management. Position - Key Accountabilities The candidate will have a first experience or specialized diploma focused on Malware Protection (working as a PSIRT/CERT member).
The candidate will also ideally have experience in the following areas:
Ability to work in an international context (English spoken mandatory) Ability to work within a team divided into different physical locations (UK, France, Spain) Maintain security tools up to date and in working conditions. Experience with managing EDR, AV, Sandboxes, IDS. Manage the relation with vendors (through tickets). Professional Skills, Abilities and Experience Essential: First experience in a large company (>6months) as PSIRT/CERT member role Well-versed in security best practices Strong technical background in IT security is necessary Understanding of how an attack works Customer service oriented skills Desirable: System administration skills (Linux/Windows Servers) Network administration background/knowledge SQL, Microsoft SSRS (SQL Server Reporting Services) Scripting Personal Attributes Attention to detail Ability to work on several incidents/subjects and keep these on-track simultaneously Understanding of operational risk and control framework Integrity Ability to remain impartial to ensure that risks/issues are highlighted to CIB Production Security Management Can do attitude & Proactive approach Strong problem solving skills Good interpersonal and communication skills Eager to learn Languages & Qualifications LANGUAGES High English spoken and written fluent (B2/C) French spoken and written will be valued QUALIFICATIONS Bachelor in Computer Science or equivalent ITIL Foundation certificate will be desirable Others On Site Services: From 9:00 to 18:00 schedule to cover in weekly shifts of 8 working hours/day Public Holidays: Team members have to cover all public holidays except 1st January and 25th December (2 persons only in shifts) BENEFITS
• Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.
• Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity).
• Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities.
• Flexible compensation plan
• Hybrid telecommuting model (50%)
• 31 vacation days Diversity and Inclusion commitment
BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.
