محلل أول للدفاع السيبراني

The role is responsible for using data collected from cyber defence tools to analyse events that occur within flyadeal to detect and mitigate cyber threats, performing vulnerability & risk assessments of systems and networks, identifying where they deviate from acceptable configurations or applicable policies, measuring effectiveness of defence-in-depth architecture against known vulnerabilities, and executing cybersecurity compliance and risk assessment on F3 new systems/service in multiple phases of the project.

Key Responsibilities

• Analyse organization's cybersecurity defence policies and configurations to evaluate compliance with regulations and organizational directives.
• Correlate incident data to identify vulnerabilities.
• Carry out vulnerability scanning on systems and assets and recommend corrections for the environment.
• Use cybersecurity products and security control technologies to reduce identified risk to an acceptable level.
• Maintain a deployable cyber defence audit toolkit based on industry best practice to support cyber defence audits.
• Escalate incidents that may cause immediate or ongoing impact.
• Analyse and report on trends in the organization's security posture, systems' security posture and cyber defence trends.
• Correlate information from multiple sources to understand situation and determine the effectiveness of an observed attack.
• Perform cybersecurity reviews and identify security gaps in security architecture to inform risk mitigation strategies.
• Conduct authorized attempts to penetrate computer systems or networks and physical premises, using realistic threat techniques, to evaluate their security and detect potential vulnerabilities.
• Prepare cybersecurity assessment and audit reports that identify technical and procedural findings and include recommended remediation strategies and solutions.
• Identify indications and warnings through research, analysis, and correlation across multiple data sets.
• Assist in the construction of signatures for implementation on cybersecurity network tools to respond to new or observed threats within the environment.
• Provide summary reports of network events and other cybersecurity-relevant activities in line with organizational policies and requirements.
• Recommend cost-effective security controls to mitigate risks identified through testing and review.
• Use security testing and code scanning tools to conduct code reviews.

Requirements

• Bachelor’s degree in Cybersecurity / Information Security / Computer Engineering / Systems Engineering or any related field.
• Minimum 3 years’ experience in cybersecurity field.
• Technical aptitude.
• Knowledge of security across various platforms.
• Fundamental computer forensics skills.
• An understanding of hacking.
• Problem-solving skills.
• Communications and presentation.
• Planning and organising.
• Judgement and analysis.
• Attention to detail
• A desire to learn