Job Title: Senior Administrator—SIEM (SO1)

Location: Next to Emirates Metro Station—Al Garhoud

Job Type: Full-Time

Project Name: Cyber Security Operations and Support

Experience Level: Level 1 Support

Job Description:

Skills:

• Primary -> Technology | Securonix SIEM Tools Administrator | Level 2 Support | 2 - Knowledgeable
• Primary -> Technology | Sentinel SIEM Tool Administrator | Level 2 Support | 2 - Knowledgeable
• Secondary -> Technology | Network Security Administrator | Level 2 Support | 2 - Knowledgeable
• Secondary -> Technology | ArcSight SIEM Tools Administrator | Level 2 Support | 2 - Knowledgeable

Certification:

Technology | Microsoft Certified: Security, Compliance, and Identity Fundamentals / CISSP/CISM/CEH/GIAC Certified Incident Handler / Certified SOC Analyst (CSA) / CompTIA Cybersecurity Analyst (CySA+) / Cisco Certified CyberOps Associate

Delivery Skills required are:

Technical Skills: -

*Identifying and analyzing potential threats and vulnerabilities using various tools and techniques.

*Leading and managing the response to security incidents, including containment, eradication, and recovery.

*Implementing and maintaining security monitoring systems, such as SIEM (Security Information and Event Management) tools.

*Prioritizing and remediating vulnerabilities based on risk assessments.

Operational Skills: -

*Developing, implementing, and enforcing security policies, standards, and procedures.

*Managing and maintaining secure configurations for systems, networks, and applications.

*Overseeing the timely application of security patches and updates to systems and software.

Analytical Skills: -

*Analyzing logs and event data from various sources to identify patterns and anomalies.

*Utilizing advanced analytics to detect and investigate security incidents.

*Conducting digital forensics investigations to uncover evidence of security breaches.

Collaboration and Teamwork:

*Collaborating with other IT and security teams to enhance the organization s security posture.

*Coordinating response efforts during security incidents with internal and external stakeholders.

*Leading incident response teams and ensuring effective communication and collaboration.