Offerta di lavoro Senior ICT Security Testing Specialist - Francia, Strasburgo

Descrizione dell'annuncio di lavoro

DID S.r.l. is looking for a Senior ICT Security Testing Specialist to carry out penetration testing, vulnerability assessments, security audits and secure configuration reviews for the large-scale IT systems run by a major EU Agency in Strasbourg. Mostly onsite in Strasbourg, starting December 2026, for 240 working days through 2027.

AT A GLANCE

Position: Senior ICT Security Testing Specialist.

Domain: penetration testing, vulnerability assessment, security audits, secure configuration, security monitoring and threat hunting.

End client: EU Agency operating large-scale IT systems, headquartered in Strasbourg, France.

Framework: EU framework contract for ICT services, Time and Means.

Delivery mode: onsite at the client office in Strasbourg, France, with some days in "proximity" (working from a location at most 2 hours from the Strasbourg office).

Onsite / proximity split: 2026 about 18 days onsite and 2 in proximity; 2027 about 196 days onsite and 23 in proximity.

Workload: full time, 20 working days in December 2026, then 220 working days in 2027 (240 days in total).

Duration: from 1 December 2026 to the end of 2027.

Working language: English.

Application deadline: 23 October 2026 (the proposal goes to the client by 26 October 2026).

Start: 1 December 2026 at the earliest.

Security clearance: EU SECRET required; the clearance process only has to be initiated, not completed, before you start.

Engagement: through DID S.r.l. as contractor; freelance (B2B) or other arrangement to be agreed; exclusive, full-time assignment.

Compensation: 600 EUR per day.

THE PROJECT

The client is an EU Agency that develops and operates large-scale IT systems supporting EU policies on borders, migration and internal security. Its security team tests and hardens these systems and their infrastructure before and after they go live. You will join that team as a hands-on security tester and auditor: you will define and check security standards, attack applications and networks the way a real adversary would, and recommend fixes the technical teams can apply.

WHAT YOU WILL DO

Testing and audits: perform network and application penetration testing (black box, grey box and white box) and ethical hacking; run internal and external technical control and vulnerability assessments, rate the effectiveness of existing controls and recommend remediation; perform source code reviews and technical security audits; review the security configuration of IT infrastructure, security devices, operating systems, databases and applications.

Standards and architecture: define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances and host-based security systems; develop and validate baseline security configurations for operating systems, applications, network and telecommunications equipment; define detailed security architecture, design and implement technical security mechanisms, standards and procedures.

Monitoring and detection: perform log analysis and security monitoring; support threat detection, incident response and cyber threat hunting.

Competenze richieste

MANDATORY REQUIREMENTS

Every requirement below is checked against your CV and documents; missing any one of them means automatic rejection.

Education: at least 4 years of relevant education after secondary school (master's degree or equivalent) - copy of diploma required.

IT security experience: 6 years of relevant professional experience in IT Security - CV with dates (MM/YYYY), employer and role.

Security clearance: EU SECRET personnel security clearance, or the process to obtain it initiated before you start - clearance certificate or the documents listed below.

Location: able to work onsite in Strasbourg and to live within 2 hours of the office - short note with your place of residence.

KNOWLEDGE REQUIRED

Security best practice guidelines: ISO 27001, NIST, SANS Top 20, OWASP and secure software development standards.

Network and web application penetration testing; vulnerability assessments; security code reviews.

Secure configuration of servers, network devices, middleware and applications; securing Unix/Linux and Windows; TCP/IP, networking protocols and network analysis tools.

Managing or deploying security technologies: firewalls, IDS/IPS, SIEM, IAM, APT detection, DLP, vulnerability analysis, PKI, virtual environments, endpoint and mobile security, encryption, remote access, backup and disaster recovery, patch management, wireless.

Security monitoring, threat detection, incident response and cyber threat hunting; security operations engineering (defensive measures, threat intelligence).

Forensic image collection and analysis.

Certifications strongly valued (please send copies of any you hold): CISSP-ISSAP, CISM, CISA, OSCP, OSCE, GPEN, CEH, CCNA, CCNP.

Also valued: knowledge of the cyber security policies and standards of the European Commission; experience with IT security auditing and assessments; experience with EU Institutions or the public sector.

SECURITY CLEARANCE

The role requires an EU SECRET personnel security clearance. If you do not hold one yet, you can still apply: after you are selected, DID and its partner will guide you through the application. To start the assignment the clearance process only has to be initiated, not completed. If you do not hold the clearance, you must provide before the start: a criminal record certificate issued no more than 30 days before the signature of the contract; written proof that the clearance process (up to EU SECRET) has been initiated; a copy of your national ID card or passport.

DOCUMENTS NEEDED

For the proposal: detailed CV in English; copy of your highest degree or diploma; copies of your security certifications; your EU security clearance certificate, if you already hold one.

Before starting, if selected: criminal record certificate (not older than 30 days at contract signature), proof that the clearance process was initiated, and a copy of your ID or passport, if you do not already hold the clearance; signed declaration of confidentiality and protection of the information system; signed declaration of non-conflict of interest.

SELECTION PROCESS AND HOW TO APPLY

By 23 October 2026, send your CV in English and a short note confirming your place of residence and your availability to work in Strasbourg from December 2026 to manager@did.srl, subject "Security Testing Specialist - EU Agency Strasbourg".

1. DID screening call and check of the mandatory requirements. 2. Preparation of the proposal with you: CV, certificates and signatures. 3. Client evaluation of the proposal; the client may also interview you. 4. Award, start of the clearance process, then onboarding from 1 December 2026.
2. About DID - DID S.r.l. is an Italian software house specialised in AI, web and mobile development and IT staff augmentation, already delivering services to EU Institutions. Your personal data will be used only for this selection and for the proposal to the end client.