Assistant Vice President - Linux Security - L3

Job Title:

Linux Security Expert

Department: CPBS- BNPP Fortis APS

About Business line/Function : IT Production Security
Position

Purpose:

The Windows and Linux Security squad manages the support and services in following Risk and Security related domains:

· Authentication

· Authorization and provisioning

· Security configuration

· Vulnerability management

· Risk management

· Security monitoring.

Function

Description:

· You will manage the lifecycle management of the Squad’s Security assets, specifically:
Red Hat IdM

· Configuration of the security monitoring tools In-house solutions

· You will be responsible for the hardening of Linux OS and related IDM (LDAP, Kerberos)

· You will be involved in Security monitoring and analysis of security events

· You will contribute to the migration of BNPPF infra and application assets to the Group’s Cloud infra

· You will be responsible for third line security support and incident response, related to authentication, authorization or vulnerability issues

· You will contribute to the Critical Asset Recovery, DORA compliance and other projects

· You will develop and maintain existing scripts, and in-house security solutions

· You will be involved in risk and vulnerability management:

· Take necessary actions to close risks and vulnerabilities

· Contribute to audit campaigns and control plans

· Report to management and other stakeholders

· You will work autonomously on large, complex tasks and at the same time you will collaborate closely with your team members and our partners of the IT Group in Europe

· You will work in a multicultural environment

· You will perform On-Call activities on a rotational basis (7/7 18:00 – 7:30)

Required Knowledge / Experience :

· You think like an engineer, not a checkbox-filler.  You don’t just follow procedures, you ask  Why? , dig into problems, and connect the dots between security, systems, and business needs. Whether it’s spotting a misconfiguration in IdM, questioning a risky default setting or proposing a smarter way to automate a task you default to critical thinking over blind compliance.

· Problems? You see them as puzzles.  When something breaks (and it will) you don’t panic, you debug. You enjoy untangling complex issues, whether it’s a Kerberos auth failure at 3 PM, a vulnerable package in production or an audit finding that needs a fix yesterday. You balance speed with thoroughness and don’t just patch symptoms: you find the root cause.

· You care about the  why  behind the work.  This isn’t just about keeping servers running; it’s about protecting the bank’s systems and data. You take ownership of security risks, explain them clearly to non-technical stakeholders and push back when someone suggests a shortcut that could bite us later.

· You share knowledge because hoarding it helps no one.  If you figure out a better way to harden a RHEL system or debug an Ansible playbook you document it, share it with the squad or even write a quick script to save others the same headache. You don’t gatekeep, you help the squad level up.

· You’re a team player, but you don’t need hand-holding.  You’ll collaborate with colleagues in Brussels, Madrid, Paris, and India, explain tech to non-engineers and sometimes work solo on deep-dive tasks. You know when to ask for help and when to push forward independently. And when you’re on call, you own the incident until it’s resolved.

Technical & Behavioral

Competencies:

Mandatory:

· Preferably “Red Hat Certified Engineer” (RHCE), or at least “Red Hat Certified System Administrator” (RHCSA)

· Maintenance and support of LDAP systems

· Scripting skills (Ansible, bash, perl)

· Mastering some AuthN and AuthZ protocols

· Vulnerability management

· Technical writing (documentation of procedures)

Preferable:

· Identity and Access Management (IAM) solutions

· Tools (Cyber Ark, ELK, Hashi Corp)
Security knowledge about AIX, Windows and Windows Server
Business experience:

· Writing skills (reports for technical and non-technical audience)

Soft Skills:

· Excellent communication skills

· Security-oriented mindset

Referential (Required knowledge, skills and abilities)
Transversal

Skills:

· Ability to develop and adapt to a process

· Ability to…