ICT Security Operations Unit

The Directorate-General for Innovation and Technological Support (DG ITEC) is responsible for the management and coordination of Information and Telecommunication technology as well as document production, printing and distribution vision, strategy and services which is fully aligned with the European Parliament’s overall strategy.

The Directorate for Cybersecurity, present in both Brussels and Luxembourg, is composed of ICT Security Operations Unit (SECOPS), Policies Standards and Guidelines (SECPOL) and Threats, Risk Monitoring and Reporting Data Protection Compliance (SECRISK) Units.

The trainee will be part of DG ITEC, Directorate for Cyber security in the ICT Security Operations Unit (SECOPS). The trainee will be focused on improving incident detection and response capabilities from one part and potentially threat intelligence building capabilities through analysis of threat detections on the other.

The Trainee will assist in analysing incidents and performing activities related to various aspects of incident response including, but not limited to:

• Investigation of incidents, produce and handle indicators of compromise to be used to support detecting and hunting activities;
• Active participation in attack analysis as part of security incident response;
• Assisting in identifying incident categories, responses and timelines;
• Assisting in documenting and creating reports for recommendations, mitigations and defenses;
• Assist in-depth research and tracking of the latest adversarial techniques and technologies;
• Provide information and indicators of compromise to other teams;
• Forensic investigation of mobile and desktop devices.

The trainee can also be involved in vulnerability management’s processes and tools improvements. S/he will also work with the team members on penetration tests Assignments. The trainee will design and develop custom automated tools and scripts to streamline and enhance various cybersecurity processes, such as Cyber Attack Surface monitor, vulnerability scanning and vulnerability monitoring process.

• Degree in IT, IT security or related sciences;
• Understanding or basic IT security concepts, standards, policies procedures, tools and controls;
• Understanding of networking, E-mail technologies and software development;
• Prior experience working with Windows or Linux OS;
• Ability to work both independently and within a team;
• Strong desire to continually learn and improve;
• Good verbal and written communication skills in English.