Senior Threat Modelling Analyst

Division: CISO

As a global critical financial infrastructure, the protection of Euroclear information and assets is fundamental to the company’s' business. Security is at the core of our services, firmly embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office (CISO) in charge of putting in place the required controls to protect our information assets adequately and effectively.

Role

The responsibilities for this position include, but are not limited to: 

• Facilitation and creation of threat models 
• Co-Development of threat modelling processes and strategies that enable security by design and empower shifting security left. 
• Co-Analysis of threat models in collaboration with blue teams to with focus on detection and response enhancements 
• Development of Enterprise level cyber threat scenarios to enable risk management and preparedness. 
• Identification of areas for potential attacks and systemic security issues as they relate to threats and vulnerabilities, including recommendations for enhancements or remediation. 
• Preparation and delivery of written and verbal briefings to communicate threat modelling findings across all levels of the enterprise and monitoring the cyber threat environment to incorporate trends in potential attack activity. 

Requirements

This role requires a wide variety of strengths and capabilities, including: 

• Bachelor’s degree in relevant field or equivalent relevant experience 
• Strong written and communication skills 
• Good technical understanding in software design and development  
• Sound experience/exposure in security related capacity or domain 
• Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with a focus on recommendations for enhancements or remediation. 
• Foundational knowledge of legal, government and jurisprudence as they relate to cybersecurity.  
• Good understanding of cybersecurity activities associated with risk management, data management, cloud computing, identity management, incident management and vulnerability management. 
• Good understanding of networking fundamentals (all OSI layers, protocols), Windows/Linux/Unix/Mac operating systems, OS and software vulnerability and exploitation techniques 
• Good understanding of the MITRE ATT&CK framework, ISO 27001, threat modelling concepts like dataflow diagrams and tools like STRIDE, PASTA, LINDUNN etc. 
• Nice to have threat intelligence gathering and sharing experience. 

#LI-NS1

Why join us

Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system. 

What We Offer:

• Work closely with inspiring, supportive and engaged colleagues from more than 80 different countries. 
• Practice your talents in a highly professional international environment. 
• Join a learning and development environment with an emphasis on knowledge sharing and training.
• Competitive salary and comprehensive benefits.

New ways of working

Find your own optimal balance within our hybrid working model, where you can connect at the office and also benefit from remote working. 

Great Place to Work for All

We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, ...). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process.