About
At Emirates, we believe in connecting the world, to and through, our global hub in Dubai and in constantly innovating to ensure our customers ‘Fly Better’. Our Cyber Defence Operations team is looking to urgently hire a dynamic and experienced Lead operational Engineer- Network Security - L3 to join our team. Our lead engineer is expected to lead complex cybersecurity incidents as well as manage escalations from security operations to investigate intrusions of all anomalous and misuse activities on hosts and networks. In addition, you will manage critical incidents and provide deep expertise to guide engineers to ensure a robust security posture and protect the organisation. You will also be accountable for threat detection, identification, prevention, and reporting of cyber-attacks.
What you will do:
- Manage critical incidents and challenges as the focal point of contact for major incidents. Coordinate with other departments during critical incidents and drive post-incident reviews and formulate preventive strategies.
- Detect, identify, and respond to possible cyber-attacks, intrusions, anomalous and misuse activities as well as evaluate incident triage activities to ensure optimum incident resolution including the ownership of escalated incidents.
- Analyse network traffic and system data to detect potential threats to resources and provide recommendations for remediation.
- Conduct analysis that encompasses defining the scope, urgency, and potential impact.
- Perform correlation of security incidents and events to enhance threat detection and prevention capabilities, baselining network traffic and host activity across the enterprise.
- Manage and document the incident throughout its cycle, including tracking and documenting incidents from initial detection through to final resolution.
- Update the knowledge base, preventative controls, and standards operating procedures.
- Executing incident trend analysis, reporting and assessing the impact on data and infrastructure as a result of cyber incidents as well as leading security operations, responding to feedback from internal IT departments, business and audit operational performance against the defined metrics and goals.
- Collaborate with intelligence analysts to correlate threat assessment data and recommend methods to enhance defence capabilities as well as liaising with the content Engineering Team to identify and implement automation and service improvement programs to manage security operations efficiently.
Specific Knowledge and Skills for the role of Engineer- Network Security - L3
The following are critical skills required to be successful in this role:
- Expert knowledge of complex network architectures, including designing and implementing secure network infrastructures, considering scalability and high availability.
- Expertise in configuring, managing, and fine-tuning advanced firewall and IPS solutions (e.g., Cisco Firepower, Check Point, Juniper Networks) to detect and mitigate sophisticated threats effectively.
- Expertise in designing and implementing network segmentation strategies to isolate critical assets and limit lateral movement in case of a breach.
- Designing and implementing highly available and scalable forward proxy architectures, considering load balancing, redundancy, and fault tolerance for critical deployments.
- Crafting and implementing granular policies within ISE, including role-based access control (RBAC), device profiling to enforce network segmentation based on user and device attributes.
- Implementing advanced content filtering and inspection techniques, including deep packet inspection (DPI), sandboxing, and advanced threat detection within encrypted traffic.
Qualifications & Experience
What you will bring:
- Qualifications: Degree or Honours (12+3 or equivalent) Computer science, Information Systems, Engineering, Telecommunications, or other related scientific or technical disciplines.
- Experience: Minimum 5 years in Information Technology and CyberSecurity Experience working in cross-functional and interdisciplinary teams to solve complex problems. Experience in operating systems, networks, databases, and web application security with a focus on advanced preventative capabilities. Hands-on experience in technical analysis with a focus on cyber threats. Experience analysing network traffic and host activities for potential attack vectors and developing mitigation strategies. Experience in advanced technical analysis. Experience in gathering a predictive understanding of adversarial strategies, priorities, and overlapping interests. Experience in technical writing such as event bulletins, cyber digests, and quarterly summary reports.
Knowledge/skills:
- Threat Detection and Response (CSOC): Expertise in threat intelligence and advanced threat detection.
- Infrastructure Protection: Mastery over network security architecture and advanced intrusion prevention systems.
- Identity: Deep understanding of identity governance and sophisticated IAM solutions.
- In-depth knowledge of cyber threats and understanding of enterprise IT and Cybersecurity operational environments.
- Ability to evaluate threat actors based on motivation and common TTPs
- Leadership Role: Yes
Salary & Benefits
Join us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry, including discounts on flights and hotels stays around the world. You can find out more information about our employee benefits in the Working
Further information on what’s it like to live and work in our cosmopolitan home city, can be found in the Dubai Lifestyle section.
