Cyber Security Specialist - Al-Jumayliyah, دولة قطر - Morison & Partners

وصف

Overview of the Job Manage and monitor ourSecurity Solutions for security issues and document any securityissues or breaches. Liaise with SOC team in incident analysis andinvestigation. Hands on prior experience in the informationsecurity field, working with security monitoring and analysistools. This person will report directly to the Head of InformationSecurity. The selected candidate must continually adapt to stay astep ahead of cyber attackers. They must stay up to date on thelatest methods attackers are using to infiltrate computer systemsand on IT security. Analysts need to research new securitytechnology to recommend what will most effectively protect theirorganization.


Key Roles & Responsibilities FunctionalRole:
Operational Responsibilities1. Monitor security devices foranomalies and security issues.2. Alert, report and investigatesecurity breaches and other cyber security incidents.3. Manage andMonitor deployed security solutions, information infrastructureincluding firewalls and data encryption programs.4. Documentsecurity breaches and assess the damage they cause.5. Work withsecurity team to perform tests and uncover networkvulnerabilities.6. Provide technical recommendations to fixdetected vulnerabilities in order to maintain a high-securitystandard.7. Stay current on cyber security trends and news.8.Perform penetration testing/deep analysis and investigationpredating to information security/cyber securityalerts/incidents.9. Research security enhancements and makerecommendations to management.10. Stay up-to-date on informationtechnology trends and security standards.11. Monitor securityfunction related to corporate information system, working closelywith the IT department of information security.12. Evaluate changesto the corporate environment for security impact and presentfinding to management.13. Leverage on Security Operations CentreExposure and corporate security solution stack14. Developing andmaintaining Security Operations Centre and facilitating bank inhandling the advanced targeted attacks.15. Assisting in developingand maintaining information security policies and procedures,16.Security incident reporting and analysis,17. Deputizing for theLead Information Security Administrator and/or Information SecuritySpecialist18. Ability to analyze the new security technologies andadapting to ever-changing threat landscape and act vigilantly in apro-active manner.

Key Business Interactions Internal External :1.Credit & Risk Executive Director 2. Head of InformationSecurity & Governance 3. Information SecurityOfficer/Specialist 4. All Business Heads 5. Vendors (as and whenrequired by Head of Department) 6. Internal Auditors 7. SOC 8.

External AuditorsKey Performance Indicators:

Analytical skills:Information security analysts must carefully study computersystems and networks and investigate any irregularities todetermine if the networks have been compromised.

Detail oriented.

Because cyberattacks can be difficult to detect, informationsecurity analysts pay careful attention to their computer systemsand watch for minor changes in performance.

Ingenuity. Informationsecurity analysts try to outthink cybercriminals and invent newways to protect their organizations computer systems and networks.
Problem-solving skills. Information security analysts uncover andfix flaws in computer systems and networks.

Skills, Knowledge andExpected Behaviors against Values Competencies

• TechnicalCompetencies:

Information Security Tools and Solutions MUST beproficient in handling the following platforms:o SIEM

• SOAR
• DLP/Data Classification/DRM
• XDR (NDR +EDR)o BAS (Breach and Attack Simulation)
• VMS(Vulnerability Management Systems)
• NGAV
• Sandbox / AI
• TIM/TIP (Threat intelligenceManagement/Platform)
• Deception/Honey Pots
• Microsoft Security Products
• OSINT tools

CloudSecurity Architectureo Application SecuritySoftCompetencies:

• Microsoft Office Skills (Excel andPPTs)
• High Quality Report Development
• Information security standards/Framework, ISO 27001, MITRE, OWASP,QCSF FIFA 2022,
• Awareness Presentation Skills for massaudience
• Problem Solving & Decision-MakingAbilities
• Adaptability with team and otherdepartments

Ability to speak security jargons in simplertermsRequired Qualifications:

• University degree withspecialization in Cybersecurity/Information Security or IT orComputer Science

Technical Certifications:
OffensiveSecurity Professional certifications / Any SANS Certifications suchas OSCP, OSCE, GCIH, GPEN, GNFA or CEH, CHFI

• Technologyspecific certifications pertaining to above (7)

DomainCertifications:

CISSP and CISM/CRISC/CISA, CIPM, ISO 27001LAMandatory Experience:

• Minimum 5-6 years of securityexperience of which a minimum of 3-4 year should be in a similarposition / responsibility.
• L2/L3 role experience would bean advantage