flyadeal
The role is responsible for using data collected from cyber defence tools to analyse events that occur within flyadeal to detect and mitigate cyber threats, performing vulnerability & risk assessments of systems and networks, identifying where they deviate from acceptable configurations or applicable policies, measuring effectiveness of defence-in-depth architecture against known vulnerabilities, and executing cybersecurity compliance and risk assessment on F3 new systems/service in multiple phases of the project. Key Responsibilities - Analyse organization's cybersecurity defence policies and configurations to evaluate compliance with regulations and organizational directives. - Correlate incident data to identify vulnerabilities. - Carry out vulnerability scanning on systems and assets and recommend corrections for the environment. - Use cybersecurity products and security control technologies to reduce identified risk to an acceptable level. - Maintain a deployable cyber defence audit toolkit based on industry best practice to support cyber defence audits. - Escalate incidents that may cause immediate or ongoing impact. - Analyse and report on trends in the organization's security posture, systems' security posture and cyber defence trends. - Correlate information from multiple sources to understand situation and determine the effectiveness of an observed attack. - Perform cybersecurity reviews and identify security gaps in security architecture to inform risk mitigation strategies. - Conduct authorized attempts to penetrate computer systems or networks and physical premises, using realistic threat techniques, to evaluate their security and detect potential vulnerabilities. - Prepare cybersecurity assessment and audit reports that identify technical and procedural findings and include recommended remediation strategies and solutions. - Identify indications and warnings through research, analysis, and correlation across multiple data sets. - Assist in the construction of signatures for implementation on cybersecurity network tools to respond to new or observed threats within the environment. - Provide summary reports of network events and other cybersecurity-relevant activities in line with organizational policies and requirements. - Recommend cost-effective security controls to mitigate risks identified through testing and review. - Use security testing and code scanning tools to conduct code reviews. Requirements: - Bachelor’s degree in Cybersecurity / Information Security / Computer Engineering / Systems Engineering or any related field. - Minimum 3 years’ experience in cybersecurity field. - Technical aptitude. - Knowledge of security across various platforms. - Fundamental computer forensics skills. - An understanding of hacking. - Problem-solving skills. - Communications and presentation. - Planning and organising. - Judgement and analysis. - Attention to detail - A desire to learn
AED 39,200 – 68,600/mo