analyst , pricing and product optimization

data business analyst

ai product business analyst Jobs in Cairo

ai product business analyst

analyst

analyst , pricing and product optimization Jobs in Cairo

application security analyst Jobs in Cairo

application security analyst

cybersecurity analyst

Capgemini

<div>
 
 About Capgemini
 
 
 
 Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of &euro;22 billion.
 
 
 
 Role Description
 
 
 
 Our Cyber Defense Unit is expanding, and we are looking for a talented Security Analyst to join our Incident Management &amp; Response (IMR) team. You will lead the lifecycle of major cybersecurity incidents, from identification through containment, eradication, and recovery, while coordinating with technical teams and executive stakeholders to ensure a timely and effective response.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Lead and coordinate end-to-end cybersecurity incident response activities, ensuring incidents are fully resolved and lessons learned are documented.
 </li>
 <li>
 Manage escalations from L1 and L2 SOC analysts and CISO teams, including complex or specialist investigations.
 </li>
 <li>
 Act as the primary point of contact for Group-level cyber incidents, collaborating closely with both analyst teams and executive stakeholders.
 </li>
 <li>
 Deliver clear, concise status updates for stakeholders at all levels.
 </li>
 <li>
 Prepare comprehensive incident reports tailored to both technical and non-technical audiences.
 </li>
 <li>
 Interpret and present technical cybersecurity subjects to executives.
 </li>
 <li>
 Conduct in-depth technical investigations using SIEM, HIPS/NIPS, EDR/AV, UBEA, and other monitoring tools.
 </li>
 <li>
 Perform threat and vulnerability analysis and provide advisory services to CISO teams and internal stakeholders.
 </li>
 <li>
 Provide oversight for specialized investigations such as digital forensics and investigative interviews, ensuring alignment with standards and legislation.
 </li>
 <li>
 Define, improve, and support incident response processes, playbooks, and methodologies.
 </li>
 <li>
 Contribute to audit support and maintain documentation.
 </li>
 <li>
 Provide regular metrics, reports, and trend analysis across weekly and monthly cycles.
 </li>
 <li>
 Analyze and improve the effectiveness of existing use cases.
 </li>
 <li>
 Develop and deliver documentation, knowledge articles, and visual materials.
 </li>
 <li>
 Support lessons learned sessions and contribute to improving the Cyber Defense Unit&rsquo;s maturity.
 </li>
 <li>
 Stay current on emerging threats, technologies, and regulatory changes.
 </li>
 <li>
 you may participate in: User awareness campaigns, Phishing simulations, Vulnerability management, Cyber-scenario exercises, Security assurance activities
 
 
 </li>
 </ul>
 
 Experience &amp; Qualifications
 
 
 
 <ul>
 <li>
 3+ years in Information Security or related fields.
 </li>
 <li>
 Incident management certifications such as CCIM, GCIH.
 </li>
 <li>
 Technical certifications such as GCFA, CHFI, CFCE.
 </li>
 <li>
 Vendor certifications such as CrowdStrike Falcon Responder, Splunk Cybersecurity Defense Analyst, EnCE.
 </li>
 <li>
 Experience with ITIL frameworks.
 </li>
 <li>
 Technical background in computing, networks, or programming.
 </li>
 <li>
 Familiarity with risk and control frameworks (e.g., NIST IR lifecycle, Cyber Kill Chain).
 </li>
 <li>
 Industry-recognized certifications such as CISSP or CISM.
 </li>
 <li>
 Proven experience handling cybersecurity incidents and risk management.
 </li>
 <li>
 Strong written and verbal communication skills in English.
 </li>
 <li>
 Experience in digital forensics, threat hunting, or enterprise‑scale incident response.
 </li>
 <li>
 Ability to manage multiple priorities in fast‑paced environments.
 </li>
 <li>
 Hands-on experience with SOC monitoring and intrusion detection tools (e.g., CrowdStrike, Splunk ES, VirusTotal Enterprise).
 </li>
 <li>
 Broad understanding of the cybersecurity threat landscape.
 </li>
 <li>
 Solid grasp of IT and security methodologies and technologies.
 
 
 </li>
 </ul>
 Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
 
 
 Get the future you want | www.capgemini.com
</div>

SOC IMR Analyst

Group-IB

<div>
 
 
 ABOUT GROUP-IB:
 
 
 
 Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity
 
 
 technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company&rsquo;s DNA, shaping its technological capabilities to defend businesses, and citizens, and support law enforcement operations.
 
 
 
 
 
 Group-IB&rsquo;s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
 
 
 
 
 
 Each of us can help make the world a safer place. Join us!
 
 
 
 
 
 
 ABOUT THE ROLE:
 
 
 
 This role combines deep technical expertise with real impact on customers&rsquo; cybersecurity resilience. As part of Group-IB&rsquo;s global delivery team, you will be at the forefront of deploying and maintaining cutting-edge threat detection technologies - Group-IB XDR and Group-IB BEP - across complex enterprise infrastructures. You will directly influence the security posture of major clients by ensuring flawless product operation, leading implementations, and resolving incidents in real time. This position is ideal for those who enjoy hands-on work with modern cybersecurity stacks, servers, network infrastructure, and virtualization platforms, while continuously collaborating with R&amp;D, Product, and Threat Intelligence teams.
 
 
 
 
 
 
 YOUR MISSION:
 
 
 <ul>
 <li>
 Deploy and configure Group-IB XDR and Group-IB BEP for enterprise customers (on-premises and hybrid environments).
 </li>
 <li>
 Conduct installation, integration, and initial configuration of servers, hypervisors, and network components.
 </li>
 <li>
 Perform system diagnostics, troubleshoot hardware and software issues, and ensure platform stability.
 </li>
 <li>
 Manage network and email traffic sources (SPAN, TAP, SMTP, O365, Google Mail, etc.) for product integration.
 </li>
 <li>
 Collect and analyze logs, traffic captures, and system data to identify and resolve operational issues.
 </li>
 <li>
 Support pilots and production rollouts, including remote and on-site assistance.
 </li>
 <li>
 Collaborate with Group-IB Product and Development teams to escalate and reproduce complex issues.
 </li>
 <li>
 Prepare technical documentation and communicate implementation progress to customers in English.
 </li>
 <li>
 Maintain high customer satisfaction by providing timely, professional, and effective technical support.
 </li>
 </ul>
 
 
 
 
 
 WHAT SUCCESS LOOKS LIKE:
 
 
 <ul>
 <li>
 Strong hands-on experience with Linux (Arch/Ubuntu) and Windows Server administration.
 </li>
 <li>
 Confident understanding of networking fundamentals: TCP/IP, VLANs, SPAN/RSPAN, GRE, VPN, routing, DHCP, DNS, ARP, and TCP flags.
 </li>
 <li>
 Practical knowledge of firewalls (iptables, nftables, UFW, Windows Firewall).
 </li>
 <li>
 Experience with OpenVPN, WireGuard, and secure remote access configuration.
 </li>
 <li>
 Experience with virtualization platforms (ESXi, Hyper-V): VM deployment, networking, and export.
 </li>
 <li>
 Proficiency with diagnostic tools (tcpdump, Wireshark, curl, openssl) and log analysis (journalctl, Event Viewer).
 </li>
 <li>
 Ability to write and execute scripts in Bash and PowerShell.
 </li>
 <li>
 Understanding of email infrastructure: MX records, SPF, DKIM, DMARC, and mail routing. Familiarity with Active Directory, GPO management, and SSH configuration.
 </li>
 <li>
 Experience working with issue-tracking systems (JIRA).
 </li>
 <li>
 English level: B2 or higher &mdash; both spoken and written, with confidence in technical communication.
 </li>
 <li>
 Native-level proficiency in Arabic (both written and spoken), with strong business and technical communication skills.
 </li>
 </ul>
 
 
 
 
 Additional requirements:
 
 <ul>
 <li>
 Knowledge of microservice vs monolithic application architecture.
 </li>
 <li>
 Understanding of IPMI (iDRAC/iLO) and BIOS setup for server provisioning.
 </li>
 <li>
 Ability to perform basic hardware replacement (memory, RAID controller, NIC).
 </li>
 <li>
 Strong analytical mindset and structured approach to troubleshooting.
 </li>
 <li>
 Readiness for occasional business travel to customer sites.
 </li>
 <li>
 A passion for cybersecurity and continuous learning in the field of threat detection and response.
 </li>
 </ul>
 
 
 
 
 Core Competencies:
 
 <ul>
 <li>
 Strong problem-solving mindset and attention to detail.
 </li>
 <li>
 Ability to structure complex information and communicate it clearly to both technical and non-technical audiences.
 </li>
 <li>
 High sense of ownership and accountability for assigned projects.
 </li>
 <li>
 Adaptability and composure when working under pressure or during critical incidents. Customer-oriented approach and willingness to go the extra mile to resolve issues.
 </li>
 <li>
 Team player with strong collaboration and communication skills.
 </li>
 <li>
 Curiosity and continuous drive for professional growth in cybersecurity.
 </li>
 </ul>
 
 
 
 
 
 OUR WORK ENVIRONMENT &amp; CULTURE:
 
 
 <ul>
 <li>
 At Group-IB, we believe that employee happiness is fundamental to success. We foster a supportive, inclusive, and dynamic workplace where every team member is empowered to grow. Whether you&rsquo;re aiming to deepen your expertise, step into leadership, explore new departments, or take your career abroad, we provide diverse opportunities for professional development.
 </li>
 <li>
 Our team is made up of specialists from around the world who bring deep international expertise and thrive on solving complex challenges. You&rsquo;ll be working with cutting-edge technologies recognized globally by Gartner, IDC, and Forrester, and contributing to projects that span across 60 countries alongside 450+ partners and 500+ clients.
 </li>
 <li>
 We take pride in our multicultural, values-driven culture&mdash;where mutual respect, collaboration, and shared goals unite us across borders. And with Group-IB&rsquo;s continued global growth and financial stability, your career trajectory here can accelerate faster than in most traditional environments.
 </li>
 </ul>
 
 
 
 
 
 WHAT DO WE OFFER
 
 :
 
 <ul>
 <li>
 Impactful Work: The opportunity to work on cutting-edge cybersecurity products that genuinely protect organizations from sophisticated threats.
 </li>
 <li>
 Dynamic Environment: Join a rapidly growing global company with a vibrant, international culture
 </li>
 <li>
 Comprehensive Health Coverage: Your well-being comes first. We offer health insurance to support you when it matters most.
 </li>
 <li>
 Certifications &amp; Continuous Learning: Our team holds over 1,000 globally recognized certifications, including CEH, CISSP, OSCP, and more. Through our incentive program, we cover the cost of professional development, because your growth fuels our innovation.
 </li>
 <li>
 Meaningful Challenges &amp; Growth Paths: From soft skills development to advanced technical training, a wide range of internal programs help you expand your skill set, and earn recognition and rewards along the way.
 </li>
 <li>
 Entrepreneurial spirit is encouraged: We value initiative. Whether it&rsquo;s launching a tech blog, organizing events, building communities, or starting a sports team. Group-IB is a place where bold ideas are supported and celebrated.
 </li>
 </ul>
 
 
</div>

Implementation Engineer

SWATX

<div>
 Key Responsibilities
 
 
 <ul>
 <li>
 Cybersecurity Architecture &amp; Solution Design
 </li>
 <li>
 Lead the design of enterprise cybersecurity architectures, covering cloud, network,
 
 
 </li>
 </ul>
 identity, data, endpoint, and application security domains.
 
 
 <ul>
 <li>
 Develop HLDs/LLDs, architecture diagrams, reference models, and security patterns
 </li>
 <li>
 Assess existing customer environments and build target-state architectures aligned with
 
 
 </li>
 </ul>
 business/security objectives.
 
 
 <ul>
 <li>
 Define Zero Trust architecture blueprints, identity models, segmentation strategies, and
 
 
 </li>
 </ul>
 detection structures.
 
 
 <ul>
 <li>
 Presales, RFP, and Proposal Support
 </li>
 <li>
 Support presales teams in opportunity qualification, customer workshops, and technical
 
 
 </li>
 </ul>
 discovery.
 
 
 <ul>
 <li>
 Lead the creation of technical proposals, RFP responses, SoWs, BOMs, and solution
 
 
 </li>
 </ul>
 write-ups.
 
 
 <ul>
 <li>
 Provide solution presentations, demonstrations, and technical clarifications to
 
 
 </li>
 </ul>
 stakeholders.
 
 
 <ul>
 <li>
 Delivery &amp; Implementation Oversight
 </li>
 <li>
 Guide delivery teams (engineering/consulting) in implementing designed architectures
 </li>
 <li>
 Participate in complex solution deployments to ensure alignment with architectural
 
 
 </li>
 </ul>
 principles.
 
 
 <ul>
 <li>
 Conduct architecture reviews, gap analysis, and compliance assessments
 </li>
 <li>
 Customer Engagement &amp; Advisory
 </li>
 <li>
 Act as a trusted advisor to CISO, IT security leaders, and enterprise architecture teams
 </li>
 <li>
 Support cybersecurity strategy development, roadmap creation, and maturity
 
 
 </li>
 </ul>
 improvement initiatives.
 
 
 <ul>
 <li>
 Provide technical leadership during critical incidents or escalations
 </li>
 <li>
 Governance, Compliance &amp; Risk
 </li>
 <li>
 Ensure architectures align with KSA regulatory frameworks:
 
 
 </li>
 </ul>
 ∙NCA ECC/CCC
 
 
 ∙SAMA CSF
 
 
 ∙CST Cybersecurity Framework
 
 
 <ul>
 <li>
 Map architectures to industry standards such as NIST CSF, ISO 27001, CIS Controls,
 
 
 </li>
 </ul>
 and cloud best practices.
 
 
 Mandatory Technical Expertise
 
 
 Candidates must have broad and deep expertise in at least 4-5 of the areas below:
 
 
 Microsoft Security Architecture (Mandatory)
 
 
 ∙Microsoft Sentinel
 
 
 ∙Microsoft Defender XDR (Endpoint, Identity, Cloud, Office 365)
 
 
 ∙Microsoft Entra ID (PIM, Conditional Access, Identity Protection)
 
 
 ∙Microsoft Purview (Data Security &amp; Compliance)
 
 
 ∙Azure Security Architecture
 
 
 ∙Azure Landing Zones, Policies, RBAC, and secure cloud governance
 
 
 Identity &amp; Access Management (IAM / IGA / PAM)
 
 
 ∙OKTA
 
 
 ∙SailPoint
 
 
 ∙BeyondTrust
 
 
 ∙IBM Security Verify
 
 
 Network &amp; Infrastructure Security
 
 
 ∙Palo Alto Networks
 
 
 ∙Fortinet
 
 
 ∙Cisco Security
 
 
 ∙Segmentation, micro-segmentation, Zero Trust architectures
 
 
 SOC &amp; Threat Detection
 
 
 ∙SIEM/XDR design
 
 
 ∙Use case development
 
 
 ∙Threat hunting frameworks
 
 
 ∙SOAR playbooks
 
 
 Cloud Security
 
 
 ∙Azure (mandatory)
 
 
 ∙AWS or GCP (optional but preferred)
 
 
 ∙Cloud-native architecture and security tooling
 
 
 Data, Application &amp; DevSecOps
 
 
 ∙Secure SDLC
 
 
 ∙API security
 
 
 ∙CI/CD pipeline security
 
 
 ∙Container/Kubernetes security (AKS, EKS)
 
 
 
 Certifications (Required &amp; Preferred)
 
 
 
 Required (one or more):
 
 
 ∙SC100 (Cybersecurity Architect Expert)
 
 
 ∙AZ500 (Azure Security Engineer)
 
 
 ∙SC200 (Security Operations Analyst)
 
 
 ∙CISSP or CISM
 
 
 Preferred:
 
 
 ∙SABSA (Foundation or Practitioner)
 
 
 ∙CCSP
 
 
 ∙SC300
 
 
 ∙GIAC certifications (GCIH, GCIA, GCLD, GCFA)
 
 
 ∙Vendor certifications (Palo Alto, Fortinet, OKTA, SailPoint, BeyondTrust)
 
 
 
 Experience Requirements
 
 
 
 ∙8-12 years in cybersecurity engineering &amp; architecture roles
 
 
 ∙At least 3+ years working as a solution architect or security architect
 
 
 ∙Experience designing and supporting large-scale enterprise or government cybersecurity
 
 
 solutions
 
 
 ∙Strong presales and customer-facing experience
</div>

Solution Architect / Cybersecurity Architect

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 You will be immersed in research involving the very latest cyber threats and unprecedented attacks, specifically those targeting the travel sector. Tracking these hacker groups and their evolving tactics will be a pivotal aspect of your role. Given the nature of such challenges, which change on a weekly basis, innovative and outside-the-box solutions are not just encouraged, they are a necessity.
 
 
 
 In this role, you&rsquo;ll get to:
 
 
 
 <ul>
 <li>
 Hunting to find undetected malware, DLP threats and API weaknesses.
 </li>
 <li>
 Replicate malware in isolated environment and check security posture, and advice improvements.
 </li>
 <li>
 Ability to identify TTPs used, malware family and threat actors based from attack information.
 </li>
 <li>
 Proactively automate repetitive tasks&mdash;including threat hunting, identifying detection gaps, and other routine workflows, and leverage AI in these automations wherever possible.
 </li>
 <li>
 Author custom detection rules to provide extra layer of security besides products.
 </li>
 <li>
 Analyze each step of the attack cycle and come up with detection ideas to mitigate them.
 </li>
 <li>
 Ability to document and produce research content in form of reports.
 </li>
 <li>
 Follow in the wild attacks and tricks on a daily basis, and protect Agoda against these attacks in form of attack surface reduction / hunt rules.
 
 
 </li>
 </ul>
 
 What you'll Need to Succeed:
 
 
 
 <ul>
 <li>
 Bachelors in Computer Science or related degree.
 </li>
 <li>
 Experience 2-5 years in cybersecurity research.
 </li>
 <li>
 Malware analysis (static and behavioral), network PCAP and memory analysis.
 </li>
 <li>
 Scripting knowledge (Python, PowerShell), Jupyter notebooks and working with no-code flows for automation.
 </li>
 <li>
 Fundamentals of malware and phishing attacks.
 </li>
 <li>
 Able to separate malicious behavior from clean activity in SIEM logs
 </li>
 <li>
 Demonstration of published research in public domain is a big plus (Whitepapers, Blogs, GitHub etc.)
 </li>
 <li>
 Good at pattern recognition and thinking out of the box solutions.
 </li>
 <li>
 Passionate with fighting Cybercriminals, and up to date with latest security news.
 </li>
 <li>
 Good communication skills in English to communicate security risks to other teams.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Threat Researcher (Bangkok Based)

Valeo

<div>
 
 
 As part of business solution implementation projects, you will be responsible for :
 
 
 
 
 <ul>
 <li>
 Provide Cybersecurity architecture best practices and Cybersecurity requirements in the other fields
 </li>
 <li>
 Design, support the implementation and control the Cybersecurity of architectures
 </li>
 <li>
 Perform Cybersecurity watch
 </li>
 <li>
 Upon request, provide assistance on other critical topics (e.g. incidents, vulnerabilities)
 
 
 </li>
 </ul>
 
 Accountability
 
 
 
 <ul>
 <li>
 Provide Cybersecurity architecture best practices and Cybersecurity requirements in the other fields
 </li>
 <ul>
 <li>
 Define/update Cybersecurity architecture best practices based on Valeo CSMS (Cybersecurity Management System), Cybersecurity standards, Valeo Information Systems environment and other product disciplines when applicable.
 </li>
 </ul>
 <li>
 Design, support the implementation and control the Cybersecurity of architectures
 </li>
 <ul>
 <li>
 Determine Cybersecurity requirements in a way to fulfill business objectives and Valeo Cybersecurity requirements
 </li>
 <li>
 Plan, research and design robust Cybersecurity architectures
 </li>
 <ul>
 <li>
 Including full product or information management covering the full lifecycle as detailed in the CSMS, whenever applicable
 </li>
 <li>
 Including DRP (Disaster Recovery Plan), log management, potential integration issues and cost constraints, when applicable
 </li>
 </ul>
 <li>
 Analyze and assess external components (e.g. libraries, software, hardware) and internal item (e.g. IS/IT solutions) in his/her scope of responsibility, according to Valeo Cybersecurity standards
 </li>
 </ul>
 <li>
 Ensure the Cybersecurity of some Valeo critical systems (e.g. platform, solution, service)
 </li>
 <ul>
 <li>
 Anticipate possible Cybersecurity risks, identify areas of weakness, and respond effectively to possible Cybersecurity breaches
 </li>
 <li>
 Control final Cybersecurity structures to ensure they behave as expected
 </li>
 </ul>
 <li>
 Cybersecurity watch
 </li>
 <ul>
 <li>
 Remain up to date with the latest Cybersecurity systems, standards, authentication protocols, Cybersecurity solutions, software/component vulnerabilities and threats
 
 </li>
 </ul>
 </ul>
 
 Responsibility
 
 
 
 <ul>
 <li>
 Design, support the implementation and control the Cybersecurity of architectures
 </li>
 <ul>
 <li>
 Acquire a deep understanding of technology Information Systems
 </li>
 <li>
 Perform risk assessments related to the context:
 </li>
 <ul>
 <li>
 Third-Party Risk Assessment
 </li>
 <li>
 Project Information Risk Assessment
 </li>
 </ul>
 <li>
 Depending on the project, design concept / software / components/ infrastructure / Cloud based Cybersecurity architectures
 </li>
 <li>
 Update the risk assessment whenever it is required (e.g. by an evolution of the requirements / context / project or service use case)
 </li>
 <li>
 Control that the Cybersecurity requirements are fulfilled during all the phases of the BCP (Business Continuity Plan) and DRP (Disaster Recovery Plan) when applicable
 </li>
 </ul>
 <li>
 Ensure the Cybersecurity of some Valeo critical systems (e.g. platform, solution, service)
 </li>
 <ul>
 <li>
 Follow the critical systems (platform, solution, service) during their whole life cycle:
 </li>
 <ul>
 <li>
 Ensure Cybersecurity has been taken into account in the RFIs/RFQs/RFPs (Request For Information/Quotation/Proposal)
 </li>
 <ul>
 <li>
 Advise on the architecture
 </li>
 <li>
 Write/validate the Cybersecurity requirements
 </li>
 </ul>
 <li>
 Perform the Third-Party Risk Assessments (when applicable)
 </li>
 <li>
 Participate to the bidders&rsquo; defense (when applicable)
 </li>
 <li>
 Contribute to and check the contractual Cybersecurity clauses. Liaise with the Legal department whenever it is needed. Report to the project manager or to the management the risks of clause non-execution.
 </li>
 <li>
 Perform Project Information Risk Assessments (when applicable)
 </li>
 <li>
 Advise on the detailed architecture (e.g. review, reuse, change)
 </li>
 <li>
 Control the Cybersecurity requirements
 </li>
 <ul>
 <li>
 Before the Go-Live and during the Run
 </li>
 <li>
 Whenever contractual obligations require it
 </li>
 </ul>
 </ul>
 <li>
 Follow or audit specific projects upon request of the Group Cybersecurity VP or delegates
 </li>
 <li>
 Report any situation that would put Valeo at risk
 </li>
 </ul>
 <li>
 Cybersecurity watch
 </li>
 <ul>
 <li>
 Share his/her Cybersecurity watch within the Cybersecurity organization
 </li>
 </ul>
 <li>
 Upon request, provide assistance on other critical topics (e.g. incidents, vulnerabilities)
 </li>
 <ul>
 <li>
 Provide technical expertise
 
 </li>
 </ul>
 </ul>
 
 Contribution
 
 
 
 <ul>
 <li>
 Ensure the Cybersecurity of some Valeo critical systems (e.g. platform, solution, service)
 </li>
 <ul>
 <li>
 Advise on possible evolutions. Propose/contribute to a roadmap for improvement.
 </li>
 <li>
 Assist in the Supplier selection.
 </li>
 <li>
 Assist the other Cybersecurity Officers for the projects, platforms, services whenever needed
 </li>
 </ul>
 <li>
 Upon request, provide assistance on other critical topics (e.g. incidents, vulnerabilities)
 </li>
 <ul>
 <li>
 Advise on actions to be done
 </li>
 <li>
 Assist in post-event analysis
 </li>
 </ul>
 <li>
 Other
 </li>
 <ul>
 <li>
 Report any situation that would put Valeo at risk
 
 </li>
 </ul>
 </ul>
 
 Perimeter
 
 
 
 <ul>
 <li>
 Valeo (Travels abroad are expected according to the needs).
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Education/Training
 
 
 
 
 
 What education and education level are necessary for the position?
 
 
 
 
 
 Required: Master&rsquo;s degree in Computer Science and/or Cybersecurity
 
 
 
 
 Optional: Certification(s) related to architecture such as:
 
 
 
 <ul>
 <li>
 CISSP (Certified Information Systems Security Professional)
 </li>
 <li>
 CISSP-ISSAP (Information Systems Security Architecture Professional)
 
 
 </li>
 </ul>
 
 Professional Experience
 
 
 
 
 
 How many years of professional experience in a specific professional area are required for the position?
 
 
 
 
 <ul>
 <li>
 &gt;8 years of relevant experience in Cybersecurity, in-depth knowledge of Cybersecurity strategies and architectures
 </li>
 <li>
 Extensive skills in Information Systems / IT risk management:
 </li>
 <ul>
 <li>
 Risk Assessment (EBIOS, Mehari, ...)
 </li>
 </ul>
 <li>
 Technical skills in:
 </li>
 <ul>
 <li>
 Cybersecurity protocols, cryptography, authentication, authorization
 </li>
 <li>
 Multi-factor authentication, single sign-on, identity management or related technologies
 </li>
 <li>
 IAM
 </li>
 <li>
 Secure development, DevSecOps, SSDLC
 </li>
 <li>
 Cloud Infrastructure Architecture (especially on AWS &amp; Google Cloud Platform).
 </li>
 <li>
 Security of containerization (Docker, Kubernetes)
 </li>
 <li>
 Infrastructure as Code
 </li>
 <li>
 Cybersecurity of IS business solutions (ALM, PLM, System Design etc.)
 </li>
 </ul>
 <li>
 Ability to interact with a broad cross-section of personnel to explain and enforce Cybersecurity measures
 </li>
 <li>
 Excellent written and verbal communication as well as business acumen and commercial outlook
 </li>
 <li>
 Client focus, and ability to work independently or as part of a collaborative team
 </li>
 <li>
 Knowledge of risk assessment methodologies:
 </li>
 <ul>
 <li>
 Third party auditing
 </li>
 <li>
 Cloud risk assessment methodologies
 </li>
 <li>
 Architecture design auditing
 
 </li>
 </ul>
 </ul>
 
 Languages
 
 
 
 <ul>
 <li>
 Required: Fluency in English
 </li>
 <li>
 Optional: French or other language
 
 
 </li>
 </ul>
 
 Other Specifications
 
 
 
 <ul>
 <li>
 Strategic problem-solving
 </li>
 <li>
 Rigor
 </li>
 <li>
 Pragmatism
 </li>
 <li>
 Curiosity
 </li>
 <li>
 Flexibility
 </li>
 <li>
 Communication
 </li>
 <li>
 Ability to work in a multicultural environment
 </li>
 <li>
 Ability to interact with a wide range of people from different backgrounds (non-technical audience included)
 </li>
 </ul>
</div>

Cybersecurity Architect, GISACC

Honeywell

<div>
 
 Job Description
 
 
 
 The Network Security and Cyber Security Engineer is responsible for designing, implementing, and maintaining a robust and secure network infrastructure for the railway organization. This role requires a deep understanding of network security best practices, cybersecurity principles, and railway-specific security requirements to ensure the protection of critical systems and data.
 
 
 
 Responsibilities
 
 
 
 
 Key responsibilities:
 
 
 
 
 Network Security Architecture
 
 
 
 <ul>
 <li>
 Analyze the engineering project's network infrastructure and security requirements.
 </li>
 <li>
 Design and implement a comprehensive network security architecture, including firewalls, intrusion detection/prevention systems, virtual private networks (VPNs), and access control mechanisms.
 </li>
 <li>
 Ensure the network security architecture aligns with industry standards, regulatory requirements, and railway-specific security guidelines.
 </li>
 <li>
 Evaluate and select appropriate network security hardware, software, and tools to meet the engineering project's needs.
 
 
 </li>
 </ul>
 
 Cybersecurity Strategy And Implementation
 
 
 
 <ul>
 <li>
 Develop and implement a comprehensive cybersecurity strategy for the engineering project, covering areas such as threat detection, incident response, and vulnerability management.
 </li>
 <li>
 Implement advanced security controls, including endpoint protection, data encryption, and user access management.
 </li>
 <li>
 Ensure the integration of cybersecurity measures with the railway's operational technology (OT) systems, such as signaling, train control, and asset management.
 </li>
 <li>
 Collaborate with the engineering project's IT and OT teams to ensure a seamless and secure integration of systems and applications.
 
 
 </li>
 </ul>
 
 Threat Monitoring And Incident Response
 
 
 
 <ul>
 <li>
 Establish and maintain a robust security monitoring and incident response framework to detect, analyze, and mitigate cyber threats for the engineering project.
 </li>
 <li>
 Implement and manage security information and event management (SIEM) systems, security orchestration and automated response (SOAR) tools, and other security monitoring solutions.
 </li>
 <li>
 Develop and regularly test incident response and disaster recovery plans to ensure the engineering project's resilience against cyber attacks.
 </li>
 <li>
 Coordinate with the railway's security operations center (SOC) and incident response team to ensure timely and effective incident management for the engineering project.
 
 
 </li>
 </ul>
 
 Compliance And Regulatory Requirements
 
 
 
 <ul>
 <li>
 Ensure the engineering project's network and cybersecurity measures comply with relevant industry standards, regulations, and guidelines, such as the Railway Cyber Security Standard (RCSS), the National Institute of Standards and Technology (NIST) Cybersecurity Framework, and the General Data Protection Regulation (GDPR).
 </li>
 <li>
 Develop and maintain comprehensive documentation, policies, and procedures to support the engineering project's compliance efforts.
 </li>
 <li>
 Collaborate with regulatory bodies, industry associations, and external auditors to address compliance requirements and address any identified gaps.
 
 
 </li>
 </ul>
 
 Continuous Improvement And Innovation
 
 
 
 <ul>
 <li>
 Stay up-to-date with the latest trends, technologies, and best practices in network security and cybersecurity, particularly within the railway industry.
 </li>
 <li>
 Identify opportunities for improving the engineering project's network and cybersecurity capabilities and recommend appropriate solutions.
 </li>
 <li>
 Collaborate with the engineering project's IT, OT, and security teams to align the network and cybersecurity strategy with the organization's overall technology roadmap and business objectives.
 </li>
 <li>
 Provide technical guidance and mentorship to junior security engineers and team members working on the engineering project.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 You must have:
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Technology, or a related engineering field. A master's degree in Cybersecurity or a relevant discipline is preferred.
 </li>
 <li>
 3-5 years of experience as a Senior Network Security and Cyber Security Engineer, with a strong focus on the railway industry and engineering project-based work.
 </li>
 <li>
 Certified Cisco Certified Network Professional (CCNP) Security or Certified Cyber Operations Specialist (CCOS) certification, or equivalent.
 </li>
 <li>
 Extensive knowledge of network security technologies, protocols, and best practices, including firewalls, VPNs, intrusion detection/prevention, and access control.
 </li>
 <li>
 Proficient in implementing and managing advanced cybersecurity solutions, such as SIEM, SOAR, and endpoint protection.
 </li>
 <li>
 Thorough understanding of railway-specific security requirements, including signaling systems, train control, and asset management.
 
 
 </li>
 </ul>
 
 We Value
 
 
 
 <ul>
 <li>
 Strong project management skills and experience in leading complex network and cybersecurity engineering initiatives.
 </li>
 <li>
 Excellent problem-solving, analytical, and troubleshooting skills.
 </li>
 <li>
 Effective communication and collaboration skills to work with cross-functional engineering teams, including IT, OT, and security personnel.
 
 
 </li>
 </ul>
 
 About Us
 
 
 
 Honeywell helps organizations solve the world's most complex challenges in automation, the future of aviation and energy transition. As a trusted partner, we provide actionable solutions and innovation through our Aerospace Technologies, Building Automation, Energy and Sustainability Solutions, and Industrial Automation business segments &ndash; powered by our Honeywell Forge software &ndash; that help make the world smarter, safer and more sustainable.
</div>

ICT Network and Cyber Security Engineer

TrendAI

<div>
 
 When you join Trend, you become part of a unique and diverse global family and you get to work towards a world safe for exchanging digital information.
 
 
 
 
 About Trend Micro
 
 
 
 Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. For additional information, visit www.trendmicro.com
 
 
 
 Position Overview
 
 
 
 The Incident Response Coordinator with Egypt serves as the central point of contact between Trend Micro&rsquo;s IR team, internal stakeholders, and customers, ensuring smooth execution and successful outcomes of incident response engagements through effective coordination and communication.
 
 
 
 Primary Responsibilities
 
 
 
 <ul>
 <li>
 Relationship Management: Establish and maintain strong relationships with key stakeholders including customers, sales, partners, and technical teams.
 </li>
 <li>
 Incident Management: Supporting the management of cyber incidents through the incident response lifecycle act as a liaison between Trend Micro IR Analysts and other stakeholders
 </li>
 <li>
 Coordinate Engagement Scoping: Develop a deep understanding of customers&rsquo; goals and outcomes to address their operational and security requirements and draft an engagement scope of work
 </li>
 <li>
 Resource Alignment: Coordinate and allocate appropriate resources and subject matter experts based on case requirements.
 </li>
 <li>
 Case Tracking: Monitor IR case progress and ensure timely task completion by IR analysts; draft summaries of ongoing operations and be able to provide oral updates/presentations for various levels of leadership.
 </li>
 <li>
 Information Gathering: Collect incident details, symptoms, remediation options, and associated risks to support stakeholder communication.
 </li>
 <li>
 Transition Management: Oversee the handoff of customers to standard support operations upon completion of IR engagement and delivery of the final report.
 </li>
 <li>
 Post-Incident Review: Lead post-incident review meetings and determine the necessity of post-mortems collaborating with Business Unit teams to design and implement long-term security solutions that enhance customer protection and support business growth
 </li>
 <li>
 Opportunities Support and Tracking: Support and track IR services relevant opportunities and documenting IR engagements and activities and present it
 
 
 </li>
 </ul>
 
 Required Experience
 
 
 
 <ul>
 <li>
 Bachelor's degree in digital Forensics, Cybersecurity, Computer Engineering, Computer Science, Telecommunications/Electronics Engineering, Information Technology, or equivalent relevant professional certifications.
 </li>
 <li>
 Minimum 5 years of experience in IT or Cybersecurity-related roles.
 </li>
 <li>
 Fluent in Arabic and English (written and spoken).
 </li>
 <li>
 At least 3 years of experience in a customer interfacing role presenting technical information to both technical and non-technical audiences.
 </li>
 <li>
 Familiarity with DFIR processes and ability to absorb technical cybersecurity information.
 </li>
 <li>
 Basic knowledge in one or more cybersecurity domains.
 </li>
 <li>
 Based in or willing to relocate to Cairo, Egypt.
 
 
 </li>
 </ul>
 
 Preferred Experience
 
 
 
 <ul>
 <li>
 Experience in a similar role within a cybersecurity vendor or DFIR provider.
 </li>
 <li>
 Hands-on experience in DFIR-related roles.
 </li>
 <li>
 Experience in presales or business development, preferably in cybersecurity services.
 </li>
 <li>
 Experience in IT project management, especially security-related projects.
 </li>
 <li>
 Exposure to escalation management, customer success, technical account management, or people management.
 </li>
 <li>
 Experience creating/drafting cybersecurity service content and/or contracts.
 </li>
 <li>
 Certifications such as GCIL, CISSP, CISM, PMP, PRINCE2, GCIH
 </li>
 <li>
 Familiarity with Trend Micro products
 </li>
 <li>
 Fluency in French or Turkish.
 
 
 </li>
 </ul>
 Trend Micro strive to build an environment of equity and inclusion, which reflects diverse points of view. We welcome, value, promote, and celebrate diversity - the very experiences and attributes that make us who we are, including but not limited to race, ethnicity, nationality, gender, gender identification, sexual orientation, level of ability, age, religion, veteran status, socio-economic status, and political philosophy.
 
 
 We embrace change, empower people, and encourage innovation. Join Trend Micro and Thrive with us.
 
 
</div>

Incident Response Coordinator

Explore 57+ Cybersecurity analyst in Cairo this March. Find roles across top companies and apply now to boost your career.