Senior Security Engineer

Overview

Seeking an innovative and experienced go-getter for the role of Senior Security Engineer to monitor the Security Operations Centre (SOC) infrastructure at G42 and manage day-to-day operations including monitoring multiple logs, working with big-data platforms and efficiently processing very large volumes of data. You will lead the security implementation function and manage the on-boarding of new and existing security solutions into G42’s security infrastructure.

Responsibilities

Functional:

• Manage core security products and infrastructure components across domains including Cloud Native Security, Application & Host Security, Infrastructure Defense and Vulnerability Assessments.
• Work with security operations and red teams to design and develop appropriate security monitoring solutions, including understanding attacks through attack trees and recognizing threats via indicators.
• Coordinate and conduct event collection, log management, event management, compliance automation and identity monitoring activities using SIEM technologies.
• Research, analyze and understand log sources utilized for security monitoring and identify areas of improvement within existing processes, procedures and documentation.
• Develop, implement and execute standard procedures for administration, content management, change management, version/patch management and lifecycle management of the SIEM/Log Management platforms.
• Support day-to-day event parsing, correlation and detection, including creation of log source extensions and flow management.
• Liaise with threat intelligence and SOC team members to implement detection of current and changing threat landscapes to improve the security posture of G42’s existing platforms.
• Identify opportunities to improve G42s security architecture & capabilities and drive changes that meet business objectives which are compliant with regulatory requirements.
• Create innovative solutions to automate and reduce the timeframes for security operations and periodically perform architectural review for existing systems.
• Educate and advise business and technical leaders on the development, delivery and management of cloud security solutions and report information security incidents through G42s established incident reporting channels.
• Manage product enhancement feature requests with vendors as required while continuously evaluating and recommending new and emerging security products and technologies.
• Perform all administration, management, configuration, testing and integration tasks related to the SIEM platform.
  
  

• Bachelor’s Degree in Computer Science, Information Technology, Engineering or related field
• Relevant Certifications including SIEM platform, SOAR, and Vulnerability Management
• Minimum 5 years of experience in system security
• At least 2 years of experience in cloud information security
  
  

• Extensive knowledge of cloud and security technologies
• Knowledge of local and international security policies and regulations
• A passion for troubleshooting and problem-solving