Job Title: Linux Security Expert 

Department: CPBS- BNPP Fortis APS 

About Business line/Function: IT Production Security

Position Purpose: 

The Windows and Linux Security squad manages the support and services in following Risk and Security related domains:

·       Authentication

·       Authorization and provisioning

·       Security configuration

·       Vulnerability management

·       Risk management

·       Security monitoring.

Function Description:

·       You will manage the lifecycle management of the Squad’s Security assets, specifically:

Red Hat IdM

·       Configuration of the security monitoring tools In-house solutions

·       You will be responsible for the hardening of Linux OS and related IDM (LDAP, Kerberos)

·       You will be involved in Security monitoring and analysis of security events

·       You will contribute to the migration of BNPPF infra and application assets to the Group’s Cloud infra

·       You will be responsible for third line security support and incident response, related to authentication, authorization or vulnerability issues

·       You will contribute to the Critical Asset Recovery, DORA compliance and other projects

·       You will develop and maintain existing scripts, and in-house security solutions

·       You will be involved in risk and vulnerability management:

·       Take necessary actions to close risks and vulnerabilities

·       Contribute to audit campaigns and control plans

·       Report to management and other stakeholders

·       You will work autonomously on large, complex tasks and at the same time you will collaborate closely with your team members and our partners of the IT Group in Europe

·       You will work in a multicultural environment

·       You will perform On-Call activities on a rotational basis (7/7 18:00 – 7:30)

Required Knowledge / Experience: 

·       You think like an engineer, not a checkbox-filler. You don’t just follow procedures, you ask "Why?", dig into problems, and connect the dots between security, systems, and business needs. Whether it’s spotting a misconfiguration in IdM, questioning a risky default setting or proposing a smarter way to automate a task you default to critical thinking over blind compliance.

·       Problems? You see them as puzzles. When something breaks (and it will) you don’t panic, you debug. You enjoy untangling complex issues, whether it’s a Kerberos auth failure at 3 PM, a vulnerable package in production or an audit finding that needs a fix yesterday. You balance speed with thoroughness and don’t just patch symptoms: you find the root cause.

·       You care about the "why" behind the work. This isn’t just about keeping servers running; it’s about protecting the bank’s systems and data. You take ownership of security risks, explain them clearly to non-technical stakeholders and push back when someone suggests a shortcut that could bite us later.

·       You share knowledge because hoarding it helps no one. If you figure out a better way to harden a RHEL system or debug an Ansible playbook you document it, share it with the squad or even write a quick script to save others the same headache. You don’t gatekeep, you help the squad level up.

·       You’re a team player, but you don’t need hand-holding. You’ll collaborate with colleagues in Brussels, Madrid, Paris, and India, explain tech to non-engineers and sometimes work solo on deep-dive tasks. You know when to ask for help and when to push forward independently. And when you’re on call, you own the incident until it’s resolved.

Technical & Behavioral Competencies:

Mandatory: 

·       Preferably “Red Hat Certified Engineer” (RHCE), or at least “Red Hat Certified System Administrator” (RHCSA)

·       Maintenance and support of LDAP systems

·       Scripting skills (Ansible, bash, perl)

·       Mastering some AuthN and AuthZ protocols

·       Vulnerability management

·       Technical writing (documentation of procedures)

Preferable: 

·       Identity and Access Management (IAM) solutions

·       Tools (CyberArk, ELK, HashiCorp)

Security knowledge about AIX, Windows and Windows Server

Business experience:

·       Writing skills (reports for technical and non-technical audience)

Soft Skills: 

·       Excellent communication skills

·       Security-oriented mindset

Referential (Required knowledge, skills and abilities)

Transversal Skills:

        ·        Ability to develop and adapt to a process

        ·        Ability to understand, explain and support change

        ·        Ability to anticipate business and strategic evolution

        ·        Client focused

        ·        Analytical ability

        ·        Ability to manage a project

Behavioral Skills: 

        ·        Communication skills

        ·        Ability to collaborate/Teamwork, but also work autonomously

        ·        Organizational Skills

        ·        Client oriented

Education Level: Bachelor’s degree or equivalent

Location: Chennai 

About BNP Paribas Group:

BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.

About BNP Paribas India Solutions:

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.