senior devops engineer

cyber security lead engineer Jobs in Egypt

cyber security lead engineer

development senior manager

devops lead

it/ot cyber security lead

cybersecurity delivery lead

SWATX

<div>Role Overview
 This role requires a hybrid professional who excels in presales, solution architecture, delivery execution, and customer
relationship management.
The ideal candidate is an experienced cybersecurity practitioner capable of handling all delivery
stages, from opportunity qualification and RFP response development to design,
implementation, and postdeployment support.
This is a customer-facing leadership role, requiring deep technical expertise, strong
communication skills, and hands-on experience across multiple cybersecurity domains. 
Key Responsibilities
1. Delivery Leadership
1.Lead the execution of cybersecurity projects across KSA and Egypt.
2.Oversee project scopes, timelines, resource planning, and delivery quality.
3.Provide hands-on technical leadership during implementation and rollouts.
4.Conduct architecture reviews, technical workshops, and customer presentations.
5.Ensure governance, documentation quality, and alignment with project SLAs. 
2. Presales &amp; RFP Support
6.Support the presales &amp; sales teams with customer engagements and technical scoping.
7.Lead the technical response for RFPs, RFQs, and proposals, including solution
architecture, bill of materials, and scope definitions.
8.Conduct PoCs, solution demonstrations, and architecture deep dives.
9.Develop reusable proposal templates and delivery frameworks.
3. Customer Relationship Management
10.Act as the primary technical delivery focal point for key customers.
11.Drive customer satisfaction, handle escalations, and maintain long-term relationships.
12.Participate in executive updates, delivery governance meetings, and steering committees. 
4. Technical Expertise &amp; Hands-On Work
13.Provide technical guidance across multiple cybersecurity domains, including:<ul><li>Identity &amp; Access Management (IAM/IGA/PAM)</li><li>SOC &amp; SIEM/XDR (Microsoft Sentinel, Defender XDR, Splunk, QRadar)</li><li>Cloud Security (Azure mandatory; AWS/GCP optional)</li><li>Network &amp; Endpoint Security (NGFW, EDR, IPS/IDS)</li><li>Governance, Risk &amp; Compliance (GRC)</li><li>Zero Trust Architecture</li></ul>
14.Perform hands-on deployment, troubleshooting, and optimization of cybersecurity
solutions.
15.Mentor delivery engineers and consultant teams across Egypt and KSA. 
Mandatory Technical Domains
Candidates must have hands-on experience in at least 3&ndash;4 of the following:
Microsoft Security Stack<ul><li>Microsoft Sentinel</li><li>Microsoft Defender XDR (Endpoint, Identity, Office, Cloud)</li><li>Microsoft Entra ID (PIM, Conditional Access)</li></ul>
Cloud Security<ul><li>Microsoft Azure (mandatory)</li><li>AWS or GCP optional</li></ul>
Infrastructure &amp; Network Security<ul><li>Palo Alto</li><li>Cisco</li><li>Fortinet</li></ul>
Identity &amp; Access Solutions<ul><li>BeyondTrust</li><li>SailPoint</li><li>OKTA</li><li>IBM Security Verify</li></ul>
SOC / MDR / IR Practices<ul><li>SIEM engineering</li><li>Use-case development</li><li>Threat hunting</li><li>IR methodology (NIST 80061)</li></ul> 
Certifications (Required &amp; Preferred)
Required (one or more):<ul><li>AZ500 (Microsoft Azure Security Engineer)</li><li>SC200 (Security Operations Analyst)</li><li>SC300 (Identity &amp; Access Administrator)</li><li>CISSP or CISM (strong preference)</li></ul>
Preferred:<ul><li>SC100 (Cybersecurity Architect Expert)</li><li>CCSP</li></ul><ul><li>SANS GIAC (GCIH, GCIA, GCLD)</li><li>Vendor technical certifications (Palo Alto, Fortinet, OKTA, BeyondTrust, SailPoint)</li></ul> 
Experience Requirements<ul><li>8&ndash;12 years overall cybersecurity experience</li><li>Minimum 3 years in delivery leadership or technical project leadership roles</li><li>Proven track record in both presales and delivery execution</li><li>Experience delivering to large enterprise and KSA government entities</li></ul></div>

Cybersecurity Delivery Lead

<div>
 Role Overview
 
 
 This role requires a hybrid professional who excels in presales, solution architecture, delivery execution, and customer
 
 
 relationship management.
 
 
 The ideal candidate is an experienced cybersecurity practitioner capable of handling all delivery
 
 
 stages, from opportunity qualification and RFP response development to design,
 
 
 implementation, and postdeployment support.
 
 
 This is a customer-facing leadership role, requiring deep technical expertise, strong
 
 
 
 Communication Skills, And Hands-on Experience Across Multiple Cybersecurity Domains.
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Delivery Leadership
 </li>
 <li>
 Lead the execution of cybersecurity projects across KSA and Egypt
 </li>
 <li>
 Oversee project scopes, timelines, resource planning, and delivery quality
 </li>
 <li>
 Provide hands-on technical leadership during implementation and rollouts
 </li>
 <li>
 Conduct architecture reviews, technical workshops, and customer presentations
 </li>
 <li>
 Ensure governance, documentation quality, and alignment with project SLAs
 </li>
 <li>
 Presales &amp; RFP Support
 </li>
 <li>
 Support the presales &amp; sales teams with customer engagements and technical scoping
 </li>
 <li>
 Lead the technical response for RFPs, RFQs, and proposals, including solution
 
 
 </li>
 </ul>
 architecture, bill of materials, and scope definitions.
 
 
 <ul>
 <li>
 Conduct PoCs, solution demonstrations, and architecture deep dives
 </li>
 <li>
 Develop reusable proposal templates and delivery frameworks
 </li>
 <li>
 Customer Relationship Management
 </li>
 <li>
 Act as the primary technical delivery focal point for key customers
 </li>
 <li>
 Drive customer satisfaction, handle escalations, and maintain long-term relationships
 </li>
 <li>
 Participate in executive updates, delivery governance meetings, and steering committees
 </li>
 <li>
 Technical Expertise &amp; Hands-On Work
 </li>
 <li>
 Provide technical guidance across multiple cybersecurity domains, including:
 
 
 </li>
 </ul>
 ∙Identity &amp; Access Management (IAM/IGA/PAM)
 
 
 ∙SOC &amp; SIEM/XDR (Microsoft Sentinel, Defender XDR, Splunk, QRadar)
 
 
 ∙Cloud Security (Azure mandatory; AWS/GCP optional)
 
 
 ∙Network &amp; Endpoint Security (NGFW, EDR, IPS/IDS)
 
 
 ∙Governance, Risk &amp; Compliance (GRC)
 
 
 ∙Zero Trust Architecture
 
 
 <ul>
 <li>
 Perform hands-on deployment, troubleshooting, and optimization of cybersecurity
 
 
 </li>
 </ul>
 solutions.
 
 
 <ul>
 <li>
 Mentor delivery engineers and consultant teams across Egypt and KSA
 
 
 </li>
 </ul>
 Mandatory Technical Domains
 
 
 Candidates must have hands-on experience in at least 3-4 of the following:
 
 
 Microsoft Security Stack
 
 
 ∙Microsoft Sentinel
 
 
 ∙Microsoft Defender XDR (Endpoint, Identity, Office, Cloud)
 
 
 ∙Microsoft Entra ID (PIM, Conditional Access)
 
 
 Cloud Security
 
 
 ∙Microsoft Azure (mandatory)
 
 
 ∙AWS or GCP optional
 
 
 Infrastructure &amp; Network Security
 
 
 ∙Palo Alto
 
 
 ∙Cisco
 
 
 ∙Fortinet
 
 
 Identity &amp; Access Solutions
 
 
 ∙BeyondTrust
 
 
 ∙SailPoint
 
 
 ∙OKTA
 
 
 ∙IBM Security Verify
 
 
 SOC / MDR / IR Practices
 
 
 ∙SIEM engineering
 
 
 ∙Use-case development
 
 
 ∙Threat hunting
 
 
 ∙IR methodology (NIST 80061)
 
 
 
 Certifications (Required &amp; Preferred)
 
 
 
 Required (one or more):
 
 
 ∙AZ500 (Microsoft Azure Security Engineer)
 
 
 ∙SC200 (Security Operations Analyst)
 
 
 ∙SC300 (Identity &amp; Access Administrator)
 
 
 ∙CISSP or CISM (strong preference)
 
 
 Preferred:
 
 
 ∙SC100 (Cybersecurity Architect Expert)
 
 
 ∙CCSP
 
 
 ∙SANS GIAC (GCIH, GCIA, GCLD)
 
 
 ∙Vendor technical certifications (Palo Alto, Fortinet, OKTA, BeyondTrust, SailPoint)
 
 
 
 Experience Requirements
 
 
 
 ∙8-12 years overall cybersecurity experience
 
 
 ∙Minimum 3 years in delivery leadership or technical project leadership roles
 
 
 ∙Proven track record in both presales and delivery execution
 
 
 ∙Experience delivering to large enterprise and KSA government entities
</div>

<div>
 Key Responsibilities
 
 
 <ul>
 <li>
 Cybersecurity Architecture &amp; Solution Design
 </li>
 <li>
 Lead the design of enterprise cybersecurity architectures, covering cloud, network,
 
 
 </li>
 </ul>
 identity, data, endpoint, and application security domains.
 
 
 <ul>
 <li>
 Develop HLDs/LLDs, architecture diagrams, reference models, and security patterns
 </li>
 <li>
 Assess existing customer environments and build target-state architectures aligned with
 
 
 </li>
 </ul>
 business/security objectives.
 
 
 <ul>
 <li>
 Define Zero Trust architecture blueprints, identity models, segmentation strategies, and
 
 
 </li>
 </ul>
 detection structures.
 
 
 <ul>
 <li>
 Presales, RFP, and Proposal Support
 </li>
 <li>
 Support presales teams in opportunity qualification, customer workshops, and technical
 
 
 </li>
 </ul>
 discovery.
 
 
 <ul>
 <li>
 Lead the creation of technical proposals, RFP responses, SoWs, BOMs, and solution
 
 
 </li>
 </ul>
 write-ups.
 
 
 <ul>
 <li>
 Provide solution presentations, demonstrations, and technical clarifications to
 
 
 </li>
 </ul>
 stakeholders.
 
 
 <ul>
 <li>
 Delivery &amp; Implementation Oversight
 </li>
 <li>
 Guide delivery teams (engineering/consulting) in implementing designed architectures
 </li>
 <li>
 Participate in complex solution deployments to ensure alignment with architectural
 
 
 </li>
 </ul>
 principles.
 
 
 <ul>
 <li>
 Conduct architecture reviews, gap analysis, and compliance assessments
 </li>
 <li>
 Customer Engagement &amp; Advisory
 </li>
 <li>
 Act as a trusted advisor to CISO, IT security leaders, and enterprise architecture teams
 </li>
 <li>
 Support cybersecurity strategy development, roadmap creation, and maturity
 
 
 </li>
 </ul>
 improvement initiatives.
 
 
 <ul>
 <li>
 Provide technical leadership during critical incidents or escalations
 </li>
 <li>
 Governance, Compliance &amp; Risk
 </li>
 <li>
 Ensure architectures align with KSA regulatory frameworks:
 
 
 </li>
 </ul>
 ∙NCA ECC/CCC
 
 
 ∙SAMA CSF
 
 
 ∙CST Cybersecurity Framework
 
 
 <ul>
 <li>
 Map architectures to industry standards such as NIST CSF, ISO 27001, CIS Controls,
 
 
 </li>
 </ul>
 and cloud best practices.
 
 
 Mandatory Technical Expertise
 
 
 Candidates must have broad and deep expertise in at least 4-5 of the areas below:
 
 
 Microsoft Security Architecture (Mandatory)
 
 
 ∙Microsoft Sentinel
 
 
 ∙Microsoft Defender XDR (Endpoint, Identity, Cloud, Office 365)
 
 
 ∙Microsoft Entra ID (PIM, Conditional Access, Identity Protection)
 
 
 ∙Microsoft Purview (Data Security &amp; Compliance)
 
 
 ∙Azure Security Architecture
 
 
 ∙Azure Landing Zones, Policies, RBAC, and secure cloud governance
 
 
 Identity &amp; Access Management (IAM / IGA / PAM)
 
 
 ∙OKTA
 
 
 ∙SailPoint
 
 
 ∙BeyondTrust
 
 
 ∙IBM Security Verify
 
 
 Network &amp; Infrastructure Security
 
 
 ∙Palo Alto Networks
 
 
 ∙Fortinet
 
 
 ∙Cisco Security
 
 
 ∙Segmentation, micro-segmentation, Zero Trust architectures
 
 
 SOC &amp; Threat Detection
 
 
 ∙SIEM/XDR design
 
 
 ∙Use case development
 
 
 ∙Threat hunting frameworks
 
 
 ∙SOAR playbooks
 
 
 Cloud Security
 
 
 ∙Azure (mandatory)
 
 
 ∙AWS or GCP (optional but preferred)
 
 
 ∙Cloud-native architecture and security tooling
 
 
 Data, Application &amp; DevSecOps
 
 
 ∙Secure SDLC
 
 
 ∙API security
 
 
 ∙CI/CD pipeline security
 
 
 ∙Container/Kubernetes security (AKS, EKS)
 
 
 
 Certifications (Required &amp; Preferred)
 
 
 
 Required (one or more):
 
 
 ∙SC100 (Cybersecurity Architect Expert)
 
 
 ∙AZ500 (Azure Security Engineer)
 
 
 ∙SC200 (Security Operations Analyst)
 
 
 ∙CISSP or CISM
 
 
 Preferred:
 
 
 ∙SABSA (Foundation or Practitioner)
 
 
 ∙CCSP
 
 
 ∙SC300
 
 
 ∙GIAC certifications (GCIH, GCIA, GCLD, GCFA)
 
 
 ∙Vendor certifications (Palo Alto, Fortinet, OKTA, SailPoint, BeyondTrust)
 
 
 
 Experience Requirements
 
 
 
 ∙8-12 years in cybersecurity engineering &amp; architecture roles
 
 
 ∙At least 3+ years working as a solution architect or security architect
 
 
 ∙Experience designing and supporting large-scale enterprise or government cybersecurity
 
 
 solutions
 
 
 ∙Strong presales and customer-facing experience
</div>

Solution Architect / Cybersecurity Architect

<div>Key Responsibilities
1. Cybersecurity Architecture &amp; Solution Design
1.Lead the design of enterprise cybersecurity architectures, covering cloud, network,
identity, data, endpoint, and application security domains.
2.Develop HLDs/LLDs, architecture diagrams, reference models, and security patterns.
3.Assess existing customer environments and build target-state architectures aligned with
business/security objectives.
4.Define Zero Trust architecture blueprints, identity models, segmentation strategies, and
detection structures. 
2. Presales, RFP, and Proposal Support
5.Support presales teams in opportunity qualification, customer workshops, and technical
discovery.
6.Lead the creation of technical proposals, RFP responses, SoWs, BOMs, and solution
write-ups.
7.Provide solution presentations, demonstrations, and technical clarifications to
stakeholders. 
3. Delivery &amp; Implementation Oversight 
8.Guide delivery teams (engineering/consulting) in implementing designed architectures.
9.Participate in complex solution deployments to ensure alignment with architectural
principles.
10.Conduct architecture reviews, gap analysis, and compliance assessments. 
4. Customer Engagement &amp; Advisory
11.Act as a trusted advisor to CISO, IT security leaders, and enterprise architecture teams.
12.Support cybersecurity strategy development, roadmap creation, and maturity
improvement initiatives.
13.Provide technical leadership during critical incidents or escalations. 
5. Governance, Compliance &amp; Risk
14.Ensure architectures align with KSA regulatory frameworks:<ul><li>NCA ECC/CCC</li><li>SAMA CSF</li><li>CST Cybersecurity Framework</li></ul> 
15.Map architectures to industry standards such as NIST CSF, ISO 27001, CIS Controls,
and cloud best practices. 
Mandatory Technical Expertise
Candidates must have broad and deep expertise in at least 4&ndash;5 of the areas below:
Microsoft Security Architecture (Mandatory)<ul><li>Microsoft Sentinel</li></ul><ul><li>Microsoft Defender XDR (Endpoint, Identity, Cloud, Office 365)</li><li>Microsoft Entra ID (PIM, Conditional Access, Identity Protection)</li><li>Microsoft Purview (Data Security &amp; Compliance)</li><li>Azure Security Architecture</li><li>Azure Landing Zones, Policies, RBAC, and secure cloud governance</li></ul>
Identity &amp; Access Management (IAM / IGA / PAM)<ul><li>OKTA</li><li>SailPoint</li><li>BeyondTrust</li><li>IBM Security Verify</li></ul>
Network &amp; Infrastructure Security<ul><li>Palo Alto Networks</li><li>Fortinet</li><li>Cisco Security</li><li>Segmentation, micro-segmentation, Zero Trust architectures</li></ul>
SOC &amp; Threat Detection<ul><li>SIEM/XDR design</li><li>Use case development</li><li>Threat hunting frameworks</li><li>SOAR playbooks</li></ul>
Cloud Security<ul><li>Azure (mandatory)</li><li>AWS or GCP (optional but preferred)</li><li>Cloud-native architecture and security tooling</li></ul>
Data, Application &amp; DevSecOps<ul><li>Secure SDLC</li></ul><ul><li>API security</li><li>CI/CD pipeline security</li><li>Container/Kubernetes security (AKS, EKS)</li></ul> 
Certifications (Required &amp; Preferred)
Required (one or more):<ul><li>SC100 (Cybersecurity Architect Expert)</li><li>AZ500 (Azure Security Engineer)</li><li>SC200 (Security Operations Analyst)</li><li>CISSP or CISM</li></ul>
Preferred:<ul><li>SABSA (Foundation or Practitioner)</li><li>CCSP</li><li>SC300</li><li>GIAC certifications (GCIH, GCIA, GCLD, GCFA)</li><li>Vendor certifications (Palo Alto, Fortinet, OKTA, SailPoint, BeyondTrust)</li></ul> 
Experience Requirements<ul><li>8&ndash;12 years in cybersecurity engineering &amp; architecture roles</li><li>At least 3+ years working as a solution architect or security architect</li><li>Experience designing and supporting large-scale enterprise or government cybersecurity</li></ul>
solutions<ul><li>Strong presales and customer-facing experience</li></ul></div>

Ethics HR

Job Responsibilities:<ul><li>Define and execute the bank&rsquo;s technology strategy, architecture, and roadmap.</li><li>Ensure alignment with business objectives, regulatory expectations, and security standards.</li><li>Oversee development, integration, and delivery of digital banking platforms, and applications.</li><li>Ensure systems are resilient, scalable, and meet performance and availability targets.</li><li>Manage infrastructure, networks, cloud services, and data platforms.</li><li>Ensure robust cybersecurity, data protection, and technology risk controls in coordination with CISO.</li><li>Oversee end-to-end operations including payments, processing, settlements, customer service, and back-office functions.</li><li>Ensure operational reliability, efficiency, and adherence to SLAs.</li><li>Ensure compliance with CBE technology, outsourcing, cybersecurity, and operational risk guidelines.</li><li>Support audits, regulatory reporting, and operational resilience requirements.</li><li>Manage technology partners, core banking, vendors, and service providers.</li><li>Establish and enforce DevOps and Agile development methodologies to accelerate product delivery and maintain quality.</li><li>Drive the design and implementation of a cloud-native architecture, optimizing the utilization of public/hybrid cloud services for scalability and cost efficiency.</li><li>Oversee data governance, management, and warehousing to ensure data quality and availability for regulatory reporting and business intelligence.</li><li>Lead the operational setup and execution of digital Know Your Customer (KYC), digital onboarding, and Anti-Money Laundering (AML) transaction monitoring systems.</li><li>Ensure the technology function actively supports Business Process Re-engineering (BPR) and automation initiatives.</li><li>Ensure contractual compliance, performance monitoring, and risk oversight.</li><li>Drive process optimization, automation, and digital operations improvement.</li><li>Ensure strong incident management, change management, and operational controls.</li><li>Lead technology and operations teams, ensuring capability development and effective execution.</li><li>Collaborate with Product, Risk, Security, and Business teams to support delivery of strategic priorities.</li></ul>Job Requirements:<ul><li>Bachelor&rsquo;s/Master&rsquo;s degree in Computer Science, Engineering, Information Systems, or a related field from a reputable university. (MBA is an advantage).</li><li>12-15+ years of experience in technology and operations leadership within banking or digital financial services.</li><li>Strong knowledge of digital banking platforms, IT architecture, cybersecurity, and banking operations.</li><li>Extensive experience leading and scaling DevOps, Agile, and Continuous Integration/Continuous Delivery (CI/CD) pipelines.</li><li>Deep practical knowledge of cloud architecture (e.g., AWS, Azure), IaaS, PaaS, and securing cloud environments.</li><li>Proven experience in managing core banking system replacements/integration and interfacing with FinTech APIs.</li><li>Experience overseeing digital customer service operations, including chat, IVR, and automated support channels.</li><li>Strong track record in implementing operational resilience strategies, including robust Disaster Recovery (DR) and Business Continuity Planning (BCP).</li><li>Deep understanding of CBE technology, outsourcing, cybersecurity, and operational resilience requirements.</li><li>Proven track record in delivering large scale digital platforms, managing IT operations, and overseeing vendor/partner ecosystems.</li><li>Relevant certifications preferred: ITIL, TOGAF, PMP, COBIT, CISSIP/CCSP (for tech governance).</li><li>Strong leadership, problem-solving, and stakeholder management capabilities.</li></ul>Job Type: Full-time

Chief Technology & Operating Officer

Capgemini

<div><div><div>Cairo<div>
SOC IMR Analyst</div>
</div></div><div></div><div><div><div><div><div>
About Capgemini
Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of &euro;22 billion.<div></div><div><div><div>
Role Description:
Our Cyber Defense Unit is expanding, and we are looking for a talented Security Analyst to join our Incident Management &amp; Response (IMR) team. You will lead the lifecycle of major cybersecurity incidents, from identification through containment, eradication, and recovery, while coordinating with technical teams and executive stakeholders to ensure a timely and effective response.
Key Responsibilities:<ul><li>
Lead and coordinate end-to-end cybersecurity incident response activities, ensuring incidents are fully resolved and lessons learned are documented.</li><li>
Manage escalations from L1 and L2 SOC analysts and CISO teams, including complex or specialist investigations.</li><li>
Act as the primary point of contact for Group-level cyber incidents, collaborating closely with both analyst teams and executive stakeholders.</li><li>
Deliver clear, concise status updates for stakeholders at all levels.</li><li>
Prepare comprehensive incident reports tailored to both technical and non-technical audiences.</li><li>
Interpret and present technical cybersecurity subjects to executives.</li><li>
Conduct in-depth technical investigations using SIEM, HIPS/NIPS, EDR/AV, UBEA, and other monitoring tools.</li><li>
Perform threat and vulnerability analysis and provide advisory services to CISO teams and internal stakeholders.</li><li>
Provide oversight for specialized investigations such as digital forensics and investigative interviews, ensuring alignment with standards and legislation.</li><li>
Define, improve, and support incident response processes, playbooks, and methodologies.</li><li>
Contribute to audit support and maintain documentation.</li><li>
Provide regular metrics, reports, and trend analysis across weekly and monthly cycles.</li><li>
Analyze and improve the effectiveness of existing use cases.</li><li>
Develop and deliver documentation, knowledge articles, and visual materials.</li><li>
Support lessons learned sessions and contribute to improving the Cyber Defense Unit&rsquo;s maturity.</li><li>
Stay current on emerging threats, technologies, and regulatory changes.</li><li>
you may participate in: User awareness campaigns, Phishing simulations, Vulnerability management, Cyber-scenario exercises, Security assurance activities</li></ul>
Experience &amp; Qualifications:<ul><li>
3+ years in Information Security or related fields.</li><li>
Incident management certifications such as CCIM, GCIH.</li><li>
Technical certifications such as GCFA, CHFI, CFCE.</li><li>
Vendor certifications such as CrowdStrike Falcon Responder, Splunk Cybersecurity Defense Analyst, EnCE.</li><li>
Experience with ITIL frameworks.</li><li>
Technical background in computing, networks, or programming.</li><li>
Familiarity with risk and control frameworks (e.g., NIST IR lifecycle, Cyber Kill Chain).</li><li>
Industry-recognized certifications such as CISSP or CISM.
</li><li>Proven experience handling cybersecurity incidents and risk management.</li><li>
Strong written and verbal communication skills in English.</li><li>
Experience in digital forensics, threat hunting, or enterprise‑scale incident response.</li><li>
Ability to manage multiple priorities in fast‑paced environments.</li><li>
Hands-on experience with SOC monitoring and intrusion detection tools (e.g., CrowdStrike, Splunk ES, VirusTotal Enterprise).</li><li>
Broad understanding of the cybersecurity threat landscape.</li><li>
Solid grasp of IT and security methodologies and technologies.</li></ul></div></div></div><div>
Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
</div><div></div><div>Get the future you want | www.capgemini.com
</div></div></div><div><div><div><div><div>Ref. code</div><div>
413452-en_US</div></div><div><div>
Posted on</div><div>
18 Feb 2026</div></div><div><div>
Experience level</div><div>
Experienced Professionals</div></div><div><div>
Contract type</div><div>
Permanent</div></div><div><div>
Location</div><div>
Cairo</div></div><div><div>
Business unit</div><div>
Other Delivery units</div></div><div><div>
Brand</div><div>
Capgemini</div></div><div><div>
Professional communities</div><div>
Cybersecurity</div></div></div></div></div></div></div></div></div>

SOC IMR Analyst

TrendAI

<div>
 
 When you join Trend, you become part of a unique and diverse global family and you get to work towards a world safe for exchanging digital information.
 
 
 
 
 About Trend Micro
 
 
 
 Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. For additional information, visit www.trendmicro.com
 
 
 
 Position Overview
 
 
 
 The Incident Response Coordinator with Egypt serves as the central point of contact between Trend Micro&rsquo;s IR team, internal stakeholders, and customers, ensuring smooth execution and successful outcomes of incident response engagements through effective coordination and communication.
 
 
 
 Primary Responsibilities
 
 
 
 <ul>
 <li>
 Relationship Management: Establish and maintain strong relationships with key stakeholders including customers, sales, partners, and technical teams.
 </li>
 <li>
 Incident Management: Supporting the management of cyber incidents through the incident response lifecycle act as a liaison between Trend Micro IR Analysts and other stakeholders
 </li>
 <li>
 Coordinate Engagement Scoping: Develop a deep understanding of customers&rsquo; goals and outcomes to address their operational and security requirements and draft an engagement scope of work
 </li>
 <li>
 Resource Alignment: Coordinate and allocate appropriate resources and subject matter experts based on case requirements.
 </li>
 <li>
 Case Tracking: Monitor IR case progress and ensure timely task completion by IR analysts; draft summaries of ongoing operations and be able to provide oral updates/presentations for various levels of leadership.
 </li>
 <li>
 Information Gathering: Collect incident details, symptoms, remediation options, and associated risks to support stakeholder communication.
 </li>
 <li>
 Transition Management: Oversee the handoff of customers to standard support operations upon completion of IR engagement and delivery of the final report.
 </li>
 <li>
 Post-Incident Review: Lead post-incident review meetings and determine the necessity of post-mortems collaborating with Business Unit teams to design and implement long-term security solutions that enhance customer protection and support business growth
 </li>
 <li>
 Opportunities Support and Tracking: Support and track IR services relevant opportunities and documenting IR engagements and activities and present it
 
 
 </li>
 </ul>
 
 Required Experience
 
 
 
 <ul>
 <li>
 Bachelor's degree in digital Forensics, Cybersecurity, Computer Engineering, Computer Science, Telecommunications/Electronics Engineering, Information Technology, or equivalent relevant professional certifications.
 </li>
 <li>
 Minimum 5 years of experience in IT or Cybersecurity-related roles.
 </li>
 <li>
 Fluent in Arabic and English (written and spoken).
 </li>
 <li>
 At least 3 years of experience in a customer interfacing role presenting technical information to both technical and non-technical audiences.
 </li>
 <li>
 Familiarity with DFIR processes and ability to absorb technical cybersecurity information.
 </li>
 <li>
 Basic knowledge in one or more cybersecurity domains.
 </li>
 <li>
 Based in or willing to relocate to Cairo, Egypt.
 
 
 </li>
 </ul>
 
 Preferred Experience
 
 
 
 <ul>
 <li>
 Experience in a similar role within a cybersecurity vendor or DFIR provider.
 </li>
 <li>
 Hands-on experience in DFIR-related roles.
 </li>
 <li>
 Experience in presales or business development, preferably in cybersecurity services.
 </li>
 <li>
 Experience in IT project management, especially security-related projects.
 </li>
 <li>
 Exposure to escalation management, customer success, technical account management, or people management.
 </li>
 <li>
 Experience creating/drafting cybersecurity service content and/or contracts.
 </li>
 <li>
 Certifications such as GCIL, CISSP, CISM, PMP, PRINCE2, GCIH
 </li>
 <li>
 Familiarity with Trend Micro products
 </li>
 <li>
 Fluency in French or Turkish.
 
 
 </li>
 </ul>
 Trend Micro strive to build an environment of equity and inclusion, which reflects diverse points of view. We welcome, value, promote, and celebrate diversity - the very experiences and attributes that make us who we are, including but not limited to race, ethnicity, nationality, gender, gender identification, sexual orientation, level of ability, age, religion, veteran status, socio-economic status, and political philosophy.
 
 
 We embrace change, empower people, and encourage innovation. Join Trend Micro and Thrive with us.
 
 
</div>

Incident Response Coordinator

Explore 1165+ Cybersecurity delivery lead in Egypt this March. Find roles across top companies and apply now to boost your career.

1165 cybersecurity delivery lead jobs In Egypt

Cybersecurity Delivery Lead

Cybersecurity Delivery Lead

Solution Architect / Cybersecurity Architect

Solution Architect / Cybersecurity Architect

Chief Technology & Operating Officer

SOC IMR Analyst

Incident Response Coordinator