Computer Security Architect; IT-DI-CSO--GRAE

Job Description

As the successful candidate you will contribute to the CERN Computer Security Office by
1) maintaining, extending and developing extra functionality for its Security Operations Centre, i.e. the central hub for incident detection and response, and,
2) and in parallel, securing CERN's contracted external cloud services (i.e. AWS and Oracle cloud, but also reviewing Microsoft Azure, Microsoft 365, Google Cloud Platform and Google Workspace set-ups).

As the successful candidate you will contribute to the CERN Computer Security Office by
1) maintaining, extending and developing extra functionality for its Security Operations Centre, i.e. the central hub for incident detection and response, and,
2) and in parallel, securing CERN's contracted external cloud services (i.e. AWS, GCP, Azure and Oracle) such that their functionality and data maximally benefit from all relevant inherent security settings.

Your main tasks will include:

• Take an active role in maintaining, supporting, and extending the Computer Security Office's incident detection and response infrastructure (its "Security Operating Centre") based on open source technologies (e.g. "Zeek", Open Search, Apache Kafka, Kubernetes, "MISP").
• Configure the IT department's newly contracted external cloud services (i.e. AWS, GCP, Azure and Oracle) such that their functionality and data maximally benefit from all relevant inherent security settings.
• Review, in addition, the current security posture and configuration of CERN's existing Microsoft and Google SaaS cloud configurations.

As side-tasks, you will have the opportunity to:

• Contribute to other computer security projects managed by the Office.
• Providing advice and consultancy in matters of computer security, including performing penetration testing.

More information here.

• Experience in design of networks as well as knowledge of communication technologies and protocols.
• Experience in administration of computing systems as well as installation, operation and maintenance (preventive and corrective) of computing systems.
• Experience in "computer security", secure configurations, security analysis and penetration testing, and, in particular, that of cloud services.
• Ideally, but in addition, experience in monitoring and responding to security threats and incidents for ICT systems.

• Excellent knowledge of the Linux/UNIX operating system, virtualisation, databases, and in particular of shell scripting and programming (Python, and/or
  
  C), other languages or technologies would be a plus.
• Knowledge of cloud frameworks like Kubernetes.
• Knowledge of best practises for developing secure software and of, development and integration of IT security (features), in particular in AWS, Google and MS cloud environments.
• Spoken and written English, with a commitment to learn French.

• You are a national of a CERN Member or Associate Member State.
• By the Final date to receive applications, you have a maximum of two years of professional experience since graduation in Computer Science (or a related field) and your highest educational qualification is either a Bachelor's or Master's degree.
• You have never had a CERN fellows or graduate contract before.
• Applicants without University degree are not eligible.
• Applicants with a PhD are not eligible.

Job closing date: 30.09.2026 at 23:59 CEST.

Contract duration: 24 months, with a possible extension up to 36 months maximum.

Working hours:

40 hours per week

Job flexibility:
Hybrid

Target start date: 01-October-2026

This position involves:

• Stand‑by duty, when required by the needs of the Organization.
• Work during nights, Sundays and official holidays, when required by the needs of the Organization.

Job…