محلل رئيسي - أمن المعلومات

Strategy

• Translate business strategies into security initiatives and solution options aligned with enterprise architecture, application security, and secure SDLC/CI-CD.
• Align policies and controls with regulations; plan testing, drive remediation, and define requirements and operating-model impacts for new or changed services.
• Maintain risk and readiness assessments, develop response scenarios, and recommend preventive and corrective action informed by blue-team/red-team exercises.
• Review the information-security risk register, coordinate updates, mitigate risks, and close audit observations.
• Set security-by-design standards; review project and change designs and recommend controls for cloud, on-premises, and integrations.
• Prepare targeted security awareness materials and research technology and automation trends to inform roadmaps.

SOC operations

• Supervise SOC operations and incident response in coordination with internal and external stakeholders.
• Lead shifts or operations when required, including handovers, task allocation, performance monitoring, escalations, and adherence to SLAs, KPIs, and procedures.
• Triage incident-queue events, coordinate responses, administer SIEM/SOAR/UBA/VM controls, and tune use cases, dashboards, and content.
• Supervise control testing against ISO 27001, ISR, and other standards and verify remediation.
• Handle security service requests and incidents against priorities and SLAs; define SOC metrics and track them on dashboards.
• Disseminate internal and external threat intelligence, including commercial CTI feeds.
• Investigate malware and intrusion attempts, analyze logs, produce reports, and improve detection content.
• Monitor security systems, respond to potential events, and prepare stakeholder dashboards and presentations, including SIEM/data-lake views and KPI packs.

Product and process improvement

• Maintain policies, standards, procedures, SOPs, and playbooks, incorporating SOC use cases and logging and telemetry data-engineering patterns.
• Track control effectiveness and compliance metrics, document lessons learned, mentor junior staff, produce audit artifacts and management reports, and drive corrective actions.

Education and experience

• Bachelor's or master's degree in Computer Science or Information Technology.
• At least 3 years of experience with a master's degree, or at least 5 years with a bachelor's degree.
• Certifications such as GCIH, GCIA, or SIEM certifications are listed as qualifications.

Posting details