Soc Analyst

Primary purpose of the role The Security specialist is responsible for the administration of the organization’s information and data security policies and practices to ensure authorized users can readily access information and that the information is protected in terms of confidentiality, integrity and availability. Well follow security best practices guideline. In this role, need to handle all responsibility as following mentioned.

* Service Management and Service Operation

Drafts and maintains the policy, standards, procedures, and documentation for security. Monitors the application and compliance of security operations procedures and reviews information systems for actual or potential breaches in security. Ensures that all identified breaches in security are promptly and thoroughly investigated. Ensures that any system changes required to maintain security are implemented. Ensures that security records are accurate and complete.

* Strategy & Architecture and Information Strategy

Obtains and acts on vulnerability information and conducts security risk assessments for business applications and computer installations; provides authoritative advice and guidance on security strategies to manage the identified risk. Investigates major breaches of security and recommends appropriate control improvements. Interprets security policy and contributes to development of standards and guidelines that comply with this. Performs risk assessment, business impact analysis and accreditation for all major information systems within the organization. Ensures proportionate response to vulnerability information, including appropriate use of forensics.

* Plan and priorities, Think and Solve Problems

* Consider future aims and goals of the team/unit and organization when prioritizing own

and others’ work

* Initiate, priorities, consult on and develop team/unit goals, strategies, and plans

* Anticipate and assess the impact of changes, such as government policy/economic conditions, on team/unit objectives and initiate appropriate responses

*Ensure current work plans and activities support and are consistent with organizational change initiatives

*Evaluate achievements and adjust future accordingly

*Technology

*Demonstrate a sound understanding of technology relevant to the work unit, and identify and select the most appropriate technology for assigned tasks.

*Identify opportunities to use a broad range of communications technologies to deliver effective messages

*Understand, act on and monitor compliance with information and communications

security and use policies

*Identify ways to leverage the value of technology to achieve team/unit outcomes, using

the existing technology of the business

*Support compliance with the records, information, and knowledge management

requirements of the organization

*Key accountabilities and Responsibilities

*Monitor security alerts and events using SIEM (Security Information and Event Management) tools.

*Investigate and analyze security incidents to determine the root cause and impact.

*Respond to security incidents by implementing containment, eradication, and recovery measures.

*Perform threat hunting activities to proactively identify potential threats and vulnerabilities.

*Maintain and configure security tools, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.

*Collaborate with other IT teams to ensure security best practices are followed.

*Develop and maintain incident response playbooks and procedures.

*Conduct regular security assessments and vulnerability scans.

*Provide timely and accurate reports on security incidents and trends to management.

*Stay up to date with the latest cybersecurity threats, trends, and technologies.

*Coordinate incident response efforts in the event of a breach, security incident, or compliance violation. Conduct internal investigations to determine the root cause of incidents and implement corrective actions to prevent future occurrences. Coordinate with the National Cyber Security Agency if any incident.

*Possess knowledge of network forensics, endpoint forensics, threat intelligence and as\ well as the functioning of applications or underlying IT infrastructure

*Competent to create custom signature/rules for detection and prevention technologies

being used in organization

*Ability to create customized scripts for automation as well as for analysis.

*Closely involved in developing, tuning and implementing threat detection analytics, security sensors and SOC Infrastructure

Pay: Up to QAR12,500.00 per month

Application Question(s):

• How many years of experience do you have in monitoring SIEM tools, conducting incident response, and performing threat hunting activities?
• Do you have hands-on experience creating custom signatures/detection rules (e.g., SIEM, IDS/IPS) and writing automation scripts for incident analysis?
• Do you have experience conducting security breach investigations and coordinating incident response efforts with government or national cybersecurity authorities?
• Have you performed security risk assessments, business impact analyses (BIA), and drafted enterprise security policies or procedures?
• Are you willing to accept the offered salary for this position?

Work Location: In person