About the Job:
The Cyber Security Incident Response Team (CSIRT) Member conducts essential cyber security incident handling activities to defend the organization from cyber-attacks through timely detection, investigation, and remediation of potential threats. They are the primary contact for any suspected security incident and work together with the SOC team to resolve incidents and remediate threats.
Main Tasks and Responsibilities:
- Serve as the main local escalation point and work with the IR Team on security incident prioritization and management.
- Act on alerts, events, and incidents escalated from the SOC Team.
- Perform technical cyber security investigations on escalated security incidents to validate and implement recommended actions on containment, remediation, and eradication of threats.
- Coordinate onboarding/troubleshooting activities with various client teams to ensure high data fidelity and continuous data stream on all Log Sources monitored.
- Compile Post Incident Analysis reports based on lessons learned from critical cybersecurity incidents and work on closing vulnerabilities that led to security incidents.
- Serve as a Cyber Security Champion for the implementation and maintenance of security policies and threat models across various local security tools.
- Review vulnerability finding reports and coordinate mitigation activities.
Qualifications, Experience, Skills:
- Minimum 6 years of security experience and 5+ years of IT experience.
- Bachelor’s Degree in Computer Science, Computer Networking, or Computer Security, or equivalent.
- CISSP, CISA, or CISM certifications or equivalent.
- Advanced understanding of information security, incident handling & response, and endpoint protection.
- Strong understanding of computer science: algorithms, data structures, databases, operating systems, networks, and tool development.
- Expertise in security technologies including firewalls, VPN, intrusion detection/prevention systems, and more.
- Strong ability to communicate effectively with different audiences.
- Red teaming, VA/PT experience is an added advantage.
Language Requirements:
- Proficiency in English is required; additional language skills may be considered an advantage.
Location:
Riyadh, Saudi Arabia
Work Conditions:
On-site, Full-time
