Continuously monitor security events and alerts generated by various security monitoring tools, such as SIEM (Security Information and Event Management) systems, IDS/IPS (Intrusion Detection/Prevention Systems), and endpoint protection platforms.
Identify and analyze security incidents based on the available information. Classify and prioritize incidents according to their severity and potential impact. Initiate and coordinate the incident response process, following predefined procedures and workflows.
Work with different IT teams to troubleshoot and resolve security-related issues and assist in configuring the logs to be forwarded from their respective systems to the centralized logging system.
Analyze vulnerability scan results and work with system owners and IT teams to remediate identified vulnerabilities within specified timeframes.
Provide recommendation for Security Use-case creation and optimization for any new/existing systems.
Conduct Network and Endpoint log analyses including threat hunting activities and present findings.
Document all incidents, investigations, and analysis activities accurately and thoroughly. Prepare incident reports, including detailed information on the incident timeline, impact, and recommended remediation actions.
OTHER
Act as an ambassador for DP World at all times when working; promoting and demonstrating positive behaviours in harmony with DP World’s Principles, values and culture; ensuring the highest level of safety is applied in all activities; understanding and following DP World’s Code of Conduct and Ethics policies.
Perform other related duties as assigned.
QUALIFICATIONS, EXPERIENCE AND SKILLS
Knowledge and Experience
Bachelor’s Degree in Computer Science or equivalent.
Should have 4-6 years of experience in IT Security with at least 4 years’ experience in conducting analysis of log data and security operations center.
Technical and hands-on experience across Cyber Security and technology domains.
Background in security technologies, network protocols and operations and understanding of TCP/IP protocol and OSI Seven Layer Model.
Computer programming and scripting languages.
Strong understanding of the Cyber Kill Chain, pervasive threats attack methods and remediation.
Industry recognized professional certifications such as GSEC, Security+, CEH, CySA.
Good understanding in E-commerce, logistics, supply chain & port operations applications will be added advantage.
Soft Skills
Sound analytical and intellectual capabilities.
Excellent time management and organizational skills.
Decision-making abilities.
Team player and conflict management skills.
Ability to multi-task, prioritize, coordinate, and work well under pressure to meet deadlines.
Strong interpersonal and communication skills ability to work in a team environment.
Cultural awareness.
Must possess Excellent Reporting Skills.
Technical Skills
Knowledge of Security Orchestration and Automation (SOAR) solutions.
Experience with two or more analysis tools used in a CIRT or similar investigative environment.
