About the Opportunity
As an Information Security Operations Specialist II, you will be responsible for:
-
SIEM, SOAR, and EDR Management:
- Maintain and enhance security platforms, particularly Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR).
- Develop and administer SOC controls, processes, procedures, and policies, ensuring their effectiveness and efficiency in the HungerStation environment.
- Monitor and react to security events/incidents through predefined and prescriptive actions.
- Conduct security event analysis to identify false positives and escalate events to CSIRT if needed.
-
Threat Hunting:
- Continuously monitor for the latest threats and implement rapid responses to mitigate potential damage from cyber attacks.
- Proactively detect, isolate, and neutralize advanced threats that evade automated security solutions.
-
Incident Response Management:
- Lead and conduct incident detection, containment, eradication, and recovery procedures.
- Develop security automation capabilities to decrease response times and streamline incident response operations.
-
Governance and Resilience:
- Follow all relevant policies, procedures, and processes for controlled and consistent work.
- Contribute to identifying opportunities for continuous improvement of processes and productivity enhancement.
-
Daily Operations:
- Ensure continuity of work by following daily operational procedures.
- Prepare timely and accurate reports related to the line of work.
Location
Riyadh, Saudi Arabia
Work Conditions
Temporary, On-Site
Requirements
- Completed degree in computer science or software engineering.
- 5+ years of experience in Security, preferably in a Cyber Security firm.
- Experience with log management tools and security event correlation.
- Familiarity with various Cloud platforms, including AWS, GCP, or Azure.
- Experience with SOAR tools, including playbook development and integration.
- Knowledge of MITRE ATT&CK, Cyber Kill Chain, and Malware Analysis.
- Experience responding to attack vectors including malware, data exfiltration, DDoS, and phishing.
- Certifications like CEH, GCIH, GCIA are a plus.
