Cybersecurity Operation Center Analyst

ASMO is a groundbreaking joint venture between DHL and Saudi Aramco. Inheriting DHL’s logistics excellence and Saudi Aramco’s extensive supply chain ecosystem, we are here to set a new benchmark and redefine the procurement and supply chain landscape, enabling growth. ASMO aims to be operational in 2025 and provide reliable end-to-end integrated procurement and supply chain services for companies across the industrial, energy, chemical, and petrochemical sectors. Our focus customers in the short term will be Saudi Aramco and its Affiliates. In the long term, all the industrial sectors within Saudi Arabia aim to reach the MENA region. Objective: Ensure the performance, security, and reliability of ASMO's Cybersecurity systems and applications. Ensure the prevention of Cybersecurity incidents and events and take immediate steps to remediate them if they occur. Identify Cybersecurity related Threats, Vulnerabilities and Risks and work with the relevant Stakeholders to implement appropriate Cybersecurity controls for their mitigation. General Responsibilities: Investigate and validate cybersecurity incidents. ▪ Respond to cybersecurity incidents and take necessary measures to contain them effectively. Maintain comprehensive understanding of ASMO technical environment, including its cloud infrastructures, Networks, solutions and applications. Report on incidents and security posture to SOC Manager and ASMO management. Facilitate the onboarding and integration of SIEM tools with ASMO’s existing infrastructure and systems and collaborate with relevant teams to address any issues arising from the integration. Develop, maintain, and test the Incident Response (IR) plan. Review and ensure complete visibility of ASMO environment and take necessary actions to address any gaps identified. Utilize threat intelligence reports to identify areas for enhancement in security and incident response capabilities. Analyze trends and emerging threats from intelligence data to identify proactive measures to protect the environment. Participate in regular review meetings with the SOC provider to assess service effectiveness. Handle the ongoing Cybersecurity operational activities and objectives. Ensure ASMO’s data, systems and networks are protected by appropriate Cybersecurity controls and provide security related support to users as and when required. Oversee and manage any outsourced Cybersecurity services (including SLAs and OLAs) and their related Third-Party Suppliers / Vendors / Contractors. Interact with Consultants and ensure Cybersecurity projects are completed on time and within budget and desired quality. Resolve Cybersecurity problems, determining their Root Cause and suggest measures to improve Cybersecurity within ASMO. Prepare and provide regular Cybersecurity Reports (Weekly, Monthly, Quarterly, Yearly, Ad Hoc, etc.) for CISO and Management. Apply security policies to meet system security objectives. Perform any other duties assigned by SOC Manager or the CISO. Qualifications: Bachelor’s degree in computer science, cybersecurity, computer engineering, or information technology preferred, or other related fields from a recognized and accredited university. CompTIA CySA+ (Cybersecurity Analyst) GIAC Security Essentials (GSEC)Certified Threat Intelligence Analyst (CTIA)Certified SOC Analyst (CSA) preferred . CTHP (Certified Threat Hunting Professional) preferred. Demonstrated proficiency in oral and written English. 5 years’ experience in the same field, Deadline: 30 days from posting.

Bachelor’s degree in computer science, cybersecurity, computer engineering, or information technology preferred, or other related fields from a recognized and accredited university. CompTIA CySA+ (Cybersecurity Analyst) GIAC Security Essentials (GSEC) Certified Threat Intelligence Analyst (CTIA) Certified SOC Analyst (CSA) preferred. CTHP (Certified Threat Hunting Professional) preferred. Demonstrated proficiency in oral and written English. 5 years’ experience in the same field.

Investigate and validate cybersecurity incidents. Respond to cybersecurity incidents and take necessary measures to contain them effectively. Maintain comprehensive understanding of ASMO technical environment, including its cloud infrastructures, Networks, solutions and applications. Report on incidents and security posture to SOC Manager and ASMO management. Facilitate the onboarding and integration of SIEM tools with ASMO’s existing infrastructure and systems and collaborate with relevant teams to address any issues arising from the integration. Develop, maintain, and test the Incident Response (IR) plan. Review and ensure complete visibility of ASMO environment and take necessary actions to address any gaps identified. Utilize threat intelligence reports to identify areas for enhancement in security and incident response capabilities. Analyze trends and emerging threats from intelligence data to identify proactive measures to protect the environment. Participate in regular review meetings with the SOC provider to assess service effectiveness. Handle the ongoing Cybersecurity operational activities and objectives. Ensure ASMO’s data, systems and networks are protected by appropriate Cybersecurity controls and provide security related support to users as and when required. Oversee and manage any outsourced Cybersecurity services (including SLAs and OLAs) and their related Third-Party Suppliers / Vendors / Contractors. Interact with Consultants and ensure Cybersecurity projects are completed on time and within budget and desired quality. Resolve Cybersecurity problems, determining their Root Cause and suggest measures to improve Cybersecurity within ASMO. Prepare and provide regular Cybersecurity Reports (Weekly, Monthly, Quarterly, Yearly, Ad Hoc, etc.) for CISO and Management. Apply security policies to meet system security objectives. Perform any other duties assigned by SOC Manager or the CISO.