Senior IT Security Engineer

وصف الوظيفة

The role of a Senior IT Security Engineer revolves around designing, implementing, and managing security measures to protect an ODE’s systems and data from cyber threats and assisting in enhancing and overseeing ODE’s information technology security program.

1. Supporting in day-to-day security operations, including monitoring security events, investigating incidents, and implementing security controls. Collaborating with the IT security team to ensure the effective functioning of security systems and tools.

2. Responsible for the implementation, and maintenance of security infrastructure, systems, and tools. This includes firewalls, intrusion detection/prevention systems, data loss prevention systems, secure network architectures, and other security technologies.

3. Conduct vulnerability assessments and penetration testing to identify weaknesses and vulnerabilities in the organization's systems and networks. Handling the remediation of identified vulnerabilities and ensuring systems are patched and up to date. 4. Developing and implementing incident response plans and procedures. Maintaining accurate records of security incidents, investigations, and remediation activities.

5. Assisting in developing and delivering IT security awareness and training programs for employees.

6. Maintaining security monitoring systems and tools, such as Security Information and Event Management (SIEM) platforms, to detect and respond to security incidents.

7. Contributing to the development, implementation, and enforcement of security policies, standards, and guidelines. Keeping up to date with changes in security requirements and best practices.

8. Conducting cyber security assessments and providing recommendations to mitigate identified risks. Collaborating with cross-functional teams to implement risk management strategies and controls.

9. Staying up to date with the latest cybersecurity threats, attack techniques, and emerging technologies. Conducting research and analysis to understand new threats and recommending proactive security measures.

متطلبات الوظيفة

- Bachelor's degree relevant to Information Technology, Computer Science/Engineering (or equivalent).

- 3-5 years of experience in a similar position.

- Proficiency in designing, implementing, and maintaining security infrastructure and systems. This includes firewalls, intrusion detection/prevention systems (IDS/IPS), secure network architectures, secure coding practices, and encryption technologies.

- Experience in conducting vulnerability assessments and penetration testing to identify weaknesses and vulnerabilities in systems and networks. Knowledge of common security vulnerabilities, exploitation techniques, and remediation strategies.

- Strong technical skills in areas such as network security, operating systems, databases, cloud computing, and virtualization. Familiarity with common security technologies, tools, and protocols.

- In-depth knowledge of cybersecurity principles, best practices, and industry standards. Understanding of security frameworks such as ISO 27001, NIST Cybersecurity Framework, or CIS Controls. Familiarity with emerging threats, attack vectors, and the evolving cybersecurity landscape.

- Ability to mentor team members, delegate tasks, and provide guidance. Excellent communication and interpersonal skills to foster collaboration and create a positive team environment.

- Knowledge of CEH, AZ-500, eWPTX, and OSCP or certified are a plus. - Fluent in English both speaking and written