ROLE OVERVIEW:
Helps protect systems networks applications and information by implementing security controls monitoring risks investigating incidents and supporting compliance with applicable security requirements.
KEY RESPONSIBILITIES:
Implement and maintain security controls for endpoints networks identities applications and/or cloud environments according to the roles scope.
Monitor security alerts investigate suspicious activity assess vulnerabilities and coordinate remediation with system owners.
Support incident response evidence preservation root-cause analysis and post-incident improvement where assigned.
Conduct or coordinate security assessments access reviews risk assessments and control testing.
Maintain security policies procedures technical records and audit evidence support compliance with applicable standards.
Promote secure configuration awareness and collaboration with infrastructure development cloud and business teams.
Requirements
ESSENTIAL REQUIREMENTS:
Relevant hands-on experience in security engineering SOC/SIEM monitoring incident response and vulnerability management.
Knowledge of networking operating systems identity and access management vulnerability management and common security controls.
Familiarity with Microsoft Sentinel or Splunk SIEM Microsoft Defender EDR Nessus and enterprise IAM.
Understanding of applicable frameworks and standards ISO 27001 NIST CSF CIS Controls and applicable UAE information-security requirements.
Sound judgement discretion documentation and incident-escalation skills.
PREFERRED / ADDITIONAL QUALIFICATIONS:
Certifications such as Security required; CISSP CISM or GIAC desirable.
Experience in defence government critical infrastructure or other controlled environments if applicable.
Required Skills:
ESSENTIAL REQUIREMENTS: Relevant hands-on experience in security engineering SOC/SIEM monitoring incident response and vulnerability management. Knowledge of networking operating systems identity and access management vulnerability management and common security controls. Familiarity with Microsoft Sentinel or Splunk SIEM Microsoft Defender EDR Nessus and enterprise IAM. Understanding of applicable frameworks and standards ISO 27001 NIST CSF CIS Controls and applicable UAE information-security requirements. Sound judgement discretion documentation and incident-escalation skills. PREFERRED / ADDITIONAL QUALIFICATIONS: Certifications such as Security required; CISSP CISM or GIAC desirable. Experience in defence government critical infrastructure or other controlled environments if applicable.