Security and Systems Operations Engineer

Security and Systems Operations Engineer

Location: Abu Dhabi

Duration: 06 Months

We are looking for a systems and security operations engineer with a minimum of 7 years' experience in the same field to join our team.

Requirements

Server Hardening and Benchmarking:

• Define the benchmarking standards for the endpoint and server environments.
• Implement and enforce security configurations aligning to benchmarks for server’s endpoint and minimize security exposure.
• Disable unnecessary services and features to reduce the attack surface
• Regularly apply security patches and updates to all endpoints to address known vulnerabilities.
• Develop and maintain a patch management strategy to ensure timely updates.
• Ensure legacy services, protocols and vulnerable services are not in use.
• Support regular vulnerability assessments on servers.
• Enforce and implement strong identity and privilege access controls
• Manage RBAC and permissions on servers and application environment.
• Implement strong authentication mechanisms, such as multi-factor authentication (MFA).
• Ensure periodic reconciliation of security controls services for infrastructure services.
• Enforce conditional access to all critical SaaS, PaaS & IaaS services
• Execute and remediate all the gaps as per the VAPT report.
• Review the existing GPO’s and apply the latest and up to date security baseline.
• Ability to remediate the weak ciphers for the instances running on all environments (On-prem & Cloud)
• Review all the existing delegated permissions across all systems and advise for the recommended actions.
• Ability to manage the Linux Redhat OS and do a proper patching and hardening.
• Ability to fix and remediate the gaps appeared on VMware environment.

Security Monitoring and Analysis:

• Ensure security logging and auditing is enabled on all the infrastructure components at server and application level.
• Analyse security alerts and take appropriate action to mitigate threats.

Cryptographic controls:

• Enforce strict encryption controls for all services and data at rest and in transit.
• Manage key vaults and certificates with robust security practices.
• Ensure all key management is audited and logged and managed with adequate approval work flows

Essential skills & certification

• MCSE, MCSA 2019
• ITIL
• CCNA
• MS Azure Administrator
• Office 365expert
• VMware VCP
• Linux Redhat