incident response engineer

Deloitte

<div>
 
 Cyber Security I Incident Response Senior Engineer
 
 
 ,
 
 
 Cairo. Egypt
 
 
 
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 
 ,
 
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 As a
 
 Digital Forensics
 
 
 Incident Response Senior Engineer
 
 
 ,
 
 you will be assisting clients with response to Cyber Incidents &amp; getting back to business, this includes data leaks, ransomware, unusual network traffic. Cyber criminals, from insider threat to nation-state sponsored hackers.
 
 
 
 Your Role Will Also Include The Following
 
 
 
 <ul>
 <li>
 Conduct analysis of log files, Windows event logs (Windows artifacts), and Linux artifacts to identify correlations using EDR, network monitoring tools, and SIEM platforms (e.g., Splunk, Microsoft Security Suite, and CrowdStrike Falcon). The role requires applying knowledge of forensic artifacts across various client platforms.
 </li>
 <li>
 Conduct in-depth analysis of malware, threat intelligence, and other relevant sources.
 </li>
 <li>
 Provide tactical support such as advice on triage, containment, eradication, and broader coordination during cyber incidents.
 </li>
 <li>
 Perform forensic analysis of systems and networks.
 </li>
 <li>
 Execute memory forensics.
 </li>
 <li>
 Perform Compromise Assessments and Threat Hunting projects in SIEM and EDR tooling.
 </li>
 <li>
 Create custom scripts (using Python) for parsing special log files, data sets, and images, etc.
 </li>
 <li>
 Create complex timelines based on findings and observations.
 </li>
 <li>
 Act as a member of the broader Deloitte Response Team, adding CIR skills to the overall team that includes privacy, crisis management, crisis communication, forensic investigations, and ICS/OT.
 </li>
 <li>
 Partake in the EMEA and Global technical incident responder community to build a strong network and share a knowledge base.
 </li>
 <li>
 Maintain flexible working hours to support the customer during high-impact incidents.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 To succeed in this role, you need to have the following:
 
 
 <ul>
 <li>
 At least 3 years of experience in Cyber Incident Response and digital forensics, or similar response experiences in operational environments.
 </li>
 <li>
 Hands-on skills to perform sharp and in-depth analyzes, both using tooling such as EDR and network sensors, but also manual analysis, if the tools are not available.
 </li>
 <li>
 Broader experience in other technical areas of information security, such as penetration testing, threat intelligence or security operations, is beneficial.
 </li>
 <li>
 Experience in systems and/or network administration, engineering or architecture is a highly advantageous.
 </li>
 <li>
 Ability to work under pressure and keep track of the big picture while performing in-depth analysis.
 </li>
 <li>
 Ability to apply analytical insights at an organizational level, considering wider implications and threat actor attack paths and lifecycles.
 </li>
 <li>
 Relevant academic qualifications such as Master&rsquo;s or bachelor&rsquo;s degree in computer science, information security or related fields.
 </li>
 <li>
 Relevant industry qualifications to demonstrate understanding, for example CISSP, CISM, GCFE, GCFA, GREM, GCIH, CCIM, GCIA, CCNIA, CCHIA, CCMRE or similar
 
 
 </li>
 </ul>
 
 The Following Attributes Are Essential
 
 
 
 <ul>
 <li>
 Strong written, verbal and presentation skills.
 </li>
 <li>
 A willingness to work as part of a diverse team.
 </li>
 <li>
 A commitment to continuous improvement and lifelong learning.
 </li>
 <li>
 A passion for technology and a drive to deliver secure, high-quality solutions.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication and interpersonal abilities.
 </li>
 <li>
 Ability to work effectively in a fast-paced and dynamic environment.
 </li>
 <li>
 Proactive and self-motivated with a keen attention to detail.
 
 
 </li>
 </ul>
 
 Connect to your service line &ndash; Technology and Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo. Egypt
 
 
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
</div>

Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Senior Engineer, Cairo, Egypt.

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Digital Forensics Engineer Job Description</h1>
Position Title: Digital Forensics Engineer 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Digital Forensics Engineer supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by providing advanced digital forensics, incident response, cyber investigation, evidence preservation, malware analysis, and e-discovery support services. 
The Digital Forensics Engineer conducts complex forensic examinations involving workstations, servers, cloud platforms, mobile devices, email systems, network traffic, and enterprise applications in support of cybersecurity investigations, incident response activities, insider threat investigations, legal support actions, and enterprise cyber defense operations. The role supports 24x7x365 Security Operations Center (SOC) functions and coordinates closely with federal stakeholders, incident responders, threat hunters, legal teams, privacy personnel, and law enforcement partners.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Perform advanced digital forensic analysis and investigations in support of SBA ECS cybersecurity operations requirements.</li><li>
Support Task Areas 3.5.3 and 3.5.3.6 by conducting forensic examinations related to cybersecurity incidents, insider threats, malware infections, unauthorized access, and data exfiltration.</li><li>
Collect, preserve, analyze, and document digital evidence in accordance with federal forensic standards and chain-of-custody procedures.</li><li>
Perform host-based, network-based, cloud-based, and mobile device forensic investigations across enterprise environments.</li><li>
Conduct forensic acquisition and analysis of Windows, Linux, macOS, cloud, virtualized, and hybrid systems.</li><li>
Analyze endpoint telemetry, security logs, network packet captures (PCAP), SIEM data, and forensic artifacts to identify indicators of compromise (IOCs) and adversary activity.</li><li>
Support incident response activities by reconstructing attack timelines, determining root cause, identifying attack vectors, and assessing operational impact.</li><li>
Perform malware analysis and reverse engineering support activities to identify malicious behaviors, persistence mechanisms, and command-and-control communications.</li><li>
Support e-discovery operations including collection, indexing, preservation, processing, and review of electronically stored information (ESI).</li><li>
Conduct forensic examinations supporting legal, Inspector General (IG), Human Resources (HR), insider threat, privacy, and law enforcement investigations.</li><li>
Utilize forensic and cyber defense tools including EnCase, FTK, Velociraptor, Wireshark, Volatility, Splunk, Microsoft Defender, Sentinel, and endpoint detection and response (EDR) platforms.</li><li>
Perform memory analysis, disk analysis, registry analysis, browser artifact analysis, and log correlation activities.</li><li>
Develop forensic reports, technical findings, evidentiary documentation, executive briefings, and remediation recommendations.</li><li>
Maintain detailed forensic documentation, evidence handling procedures, and chain-of-custody records.</li><li>
Support cybersecurity monitoring, detection, containment, eradication, and recovery activities within the SOC environment.</li><li>
Coordinate with SOC analysts, incident responders, threat hunters, engineers, and federal stakeholders during cyber investigations and breach response activities.</li><li>
Support continuous improvement of forensic methodologies, investigative procedures, and cybersecurity operational capabilities.</li><li>
Assist with the development and maintenance of digital forensic playbooks, standard operating procedures (SOPs), and incident handling guidance aligned with NIST SP 800-61 and NIST SP 800-86.</li><li>
Research emerging cyber threats, adversary tactics, techniques, and procedures (TTPs), and evolving forensic technologies.</li><li>
Support federal cybersecurity compliance requirements, reporting activities, and operational readiness initiatives.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Digital Forensics, Information Assurance, Information Technology, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 8 years of experience supporting digital forensics, cyber investigations, incident response, cybersecurity operations, or Security Operations Center (SOC) environments.</li><li>
Hands-on experience conducting enterprise-level forensic investigations and evidence analysis.</li><li>
Experience with forensic acquisition and analysis tools including EnCase, FTK, X-Ways, Velociraptor, Volatility, or equivalent technologies.</li><li>
Experience analyzing Windows, Linux, cloud, mobile, and network forensic artifacts.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting legal hold, e-discovery, insider threat, and regulatory investigation activities.</li><li>
Experience with SIEM, EDR, IDS/IPS, packet analysis, and security monitoring technologies.</li><li>
Strong understanding of NIST cybersecurity standards including NIST SP 800-61 and NIST SP 800-86.</li><li>
Ability to prepare technical forensic reports and present investigative findings to technical and executive stakeholders.</li><li>
Strong analytical, investigative, communication, and technical documentation skills.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
EnCase Certified Examiner (EnCE)</li><li>
Certified Computer Examiner (CCE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA CySA+</li><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li></ul>
6HY6JyRiD8</div>

SBA - Digital Forensics Engineer

HCA Healthcare

<div>Do you have the career opportunities as a(an) Senior Security Threat Engineer you want with your current employer? We have an exciting opportunity for you to join HCA Healthcare which is part of the nation's leading provider of healthcare services, HCA Healthcare.
Job Summary
You will be a Cyber Defender &ndash; serving as the last line of defense between HCA and the threat actors that wish to bring harm to HCA and the patients we serve. You will use state of the art technologies to respond to threats on our network and eradicate them as a member of our Critical Threat Services (CTS) team. As a member of CTS, you will operate along with a small team of like-minded individuals with a passion for cyber security operations.
The Senior Threat Engineer will provide Tier 2, and Tier 3 analysis to cyber security threats and potential incidents. In addition to serving as a Subject Matter Expert on all routine cyber threats, the Senior Threat Response Engineer will be capable of independently leading Major Incident Response teams composed of resources from across the enterprise throughout the cyber incident response process.
Successful candidates will have a passion for cybersecurity and be naturally curious and self-motivated to investigate and discover root cause of events while working in a fast-paced and sometimes stressful environment. Good teamwork and communication skills are also vital. Our team operates as a close-knit group serving a noble purpose &ndash; to win the fight against evil every day.
Note: This position requires rotating on-call coverage/availability for after-hours and holidays as needed.
Major Responsibilities<ul><li>
Major Incident Response &ndash; serve as the lead cyber resource in Major Incident response to execute the IR process and advise the business.</li><li>
Provide guidance to field resources on how to properly remediate a threat.</li><li>
Work closely with other Cyber Defense Center (CDC) team members to improve tools, techniques, and procedures for CDC operation.</li><li>
Continuously improve documentation of work products and processes.</li><li>
Participate in red/blue team exercises.</li><li>
Routinely collaborate with individuals and teams from across the enterprise. Serve as a Subject Matter Expert in all domains related to the CDC</li></ul>
Education &amp; Experience:<ul><li>
Bachelor's degree Preferred</li><li>
5+ years of experience in a relevant field Required &bull;Experience as a member of a Cyber Incident Response Team (CIRT) or comparable</li><li>
Experience executing an Incident Response plan, preferably based on recognized industry standards (e.g. &ndash; NIST, SANS, etc)</li><li>
Experience in Windows Artifact Analysis and Forensic Analysis (e.g. &ndash; Program Execution, File/Folder opening, Account Usage, pulling memory, following proper evidence handling procedures, etc) using industry standard tools and available logs (e.g. &ndash; Endpoint Detection and Response (EDR) tools such as Microsoft Defender Endpoint).</li><li>
Experience in Memory Analysis using tools such as Volatility</li><li>
Experience in network forensic analysis to determine validity of detected events using available network logs collected via SEIM.</li><li>
Experience with an event/information analysis framework such as Analysis of Competing Hypotheses (ACH).</li><li>
Experience in performing security analysis or reporting utilizing Security Incident and Event Management (SIEM) Technologies.</li><li>
Experience with document management and sustaining Security Operations Center (SOC) policies and run book procedures for incident response.</li><li>
Experience with documenting root cause analysis and lessons learned.</li><li>
Experience consuming and generating cybersecurity threat intelligence.</li><li>
Experience across the technology stack. Familiarity with all OSI layers and expertise in some.</li><li>
Experiencing using the following types of security tools:</li><li><ul><li>
SIEM oFirewalls</li><li>
Web Proxy</li><li>
Anti-Virus (AV)</li><li>
Next Gen Anti-Virus (NGAV)</li><li>
Endpoint Detection and Response (EDR)</li><li>
Sandboxing oVirtual Machines</li><li>
Netflow analysis</li><li>
Malware Repositories</li><li>
Threat Intelligence</li><li>
Deception Stack</li><li>
Intrusion Detection/Prevention System (IDS/IPS)</li><li>
Security Orchestration Automation Response (SOAR)</li><li>
Phishing Triage oUser Behavior Analytics (UBA)</li><li>
Email Hygiene and Filtering</li></ul></li><li>
Experience interfacing with peer support teams (Security Engineering, Vulnerability and Patching Teams, Networking, Access Management, Legal, Risk/Governance, etc.)</li><li>
Experience working in a high-tempo, dynamic environment with a high performance team.</li><li>
Experience with work ticketing systems (e.g. &ndash; ServiceNow, JIRA)</li><li>
Experience with Threat Modeling and Kill Chain analysis</li></ul>
Other Qualifications<ul><li>
The successful candidate will possess the following aptitudes and skillsets:</li><li><ul><li>
Leadership ability to independently lead and direct Major Incident Response efforts as well as projects.</li><li>
Excellent critical thinking skills to understand available data and use it to support or refute potential hypothesis that explain the data. Use available data to develop and communicate conclusions and recommendations.</li><li>
An ability to work and thrive in stressful situations. A demeanor that conveys calm professionalism in stressful situations.</li><li>
An ability to maintain confidentiality of sensitive data and to follow proper ethical practices for using tools and accessing data.</li><li>
A strong desire to determine root cause of events. A willingness to fully investigate all alternatives exhaustively until a conclusion can be supported.</li><li>
Ability to self-prioritize tasks based on criticality and threat level.</li></ul></li></ul>
The following certifications and courses are helpful, but, not required:<ul><li>
GIAC: GSEC, GCIH, GCFA, GCIA, GCED, GMON, GCDA, GDAT or comparable</li></ul>
Additional Information<ul><li>
Must live in or near the Greater Area of Nashville, TN</li></ul><h5 class="jobSectionHeader">
Benefits</h5>
HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:<ul><li>
Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health and telemedicine services</li><li>
Wellbeing support, including free counseling and referral services</li><li>
Time away from work programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence</li><li>
Savings and retirement resources, including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling</li><li>
Education support through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing</li><li>
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts</li></ul>
Learn more about Employee Benefits
Note: Eligibility for benefits may vary by location.
HCA Healthcare has been recognized as one of the World's Most Ethical Companies&reg; by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.
&quot;Bricks and mortar do not make a hospital. People do.&quot;- Dr. Thomas Frist, Sr. 
HCA Healthcare Co-Founder
If you are looking for an opportunity that provides satisfaction and personal growth, we encourage you to apply for our Senior Security Threat Engineer opening. We promptly review all applications. Highly qualified candidates will be contacted for interviews. Unlock the possibilities and apply today!
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.</div>

Senior Security Threat Engineer

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
JOB PURPOSE

To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process. 

Description

Security Incident Response Management

1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.

5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.

6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.

7. Recommend security solutions based on security postures and gaps identified.

8. Manage communication with other departments to facilitate investigation process.

9. Develop and update SLA between SOC and other departments when required and maintain SLA.

Strategy

10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy

Policies, Processes and Procedures

11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.

Day-to-day Management

12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards

Supervision

13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures

Compliance

14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks<div> 
</div></div><div>
Qualifications<div></div> 
Qualifications &amp; Experience
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>

o Certified Information Systems Security Professional (CISSP)

o Certified Information Security Manager (CISM)
<ul><li> Mandatory Certification:</li></ul>

o GIAC Certified Incident Handling (GCIH) 


Skills
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>

Very good MS Office skills 
<div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

Concentrix

<div>
 
 Job Title
 
 
 
 Cloud Resiliency Architect with English and Arabic
 
 
 We are seeking a Resiliency Engineer to lead advisory workshops for our clients with developing cloud architectures. The successful candidate will play a critical role in advising on and designing strategies that enhance the resilience of cloud environments. The focus is on concepts and practices including high availability, disaster recovery planning, business continuity planning, major incident response plans, and formal risk assessments.
 
 
 
 Languages: French and English
 
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Lead advisory workshops to assist clients in building resilient cloud architectures.
 </li>
 <li>
 Advise on strategies to improve system reliability and availability.
 </li>
 <li>
 Develop and implement disaster recovery and business continuity plans.
 </li>
 <li>
 Conduct formal risk assessments to identify potential vulnerabilities.
 </li>
 <li>
 Design major incident response plans to mitigate and manage disruptions effectively.
 </li>
 <li>
 Collaborate with client teams to understand their architectural needs and provide tailored solutions.
 </li>
 <li>
 Educate clients on best practices for building resilient systems.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 A minimum of 3 years of experience in cloud resiliency engineering or related fields.
 </li>
 <li>
 Demonstrated exposure to Site Reliability Engineering concepts.
 </li>
 <li>
 Strong understanding of high availability, disaster recovery, and business continuity planning.
 </li>
 <li>
 Experience in conducting risk assessments and developing incident response plans.
 </li>
 <li>
 Ability to communicate complex technical concepts to non-technical stakeholders.
 </li>
 <li>
 Excellent interpersonal and communication skills, with the ability to lead workshops and engage with diverse client teams.
 </li>
 </ul>
</div>

Cloud Resiliency Architect with English and Arabic

PROZ TECHNOLOGIES

Application L1 Support EngineerHello, Greetings from Proztec Qatar! I hope everything is going well with you.JOB DESCRIPTIONThe Application L1 Support Engineer is responsible for providing first-level support for business applications, ensuring timely resolution of user issues and maintaining optimal system performance. The role focuses on handling tickets, monitoring application health, and ensuring quick response times to minimize business impact. The engineer will work closely with L2/L3 teams to escalate complex issues and ensure smooth application operations.DUTIES &amp; RESPONSIBILITIES<ul><li>Provide first-level (L1) support for applications and end users</li><li>Monitor application performance and ensure system availability</li><li>Log, track, and manage incidents using ticketing tools</li><li>Ensure timely response and resolution in line with SLAs</li><li>Perform initial troubleshooting and issue diagnosis</li><li>Escalate complex issues to L2/L3 support teams when required</li><li>Follow ITSM processes including Incident and Service Request Management</li><li>Maintain accurate documentation of issues and resolutions</li><li>Communicate effectively with users regarding issue status and updates</li><li>Support routine checks, monitoring, and basic maintenance activities</li></ul>SKILLS &amp; ABILITIES<ul><li>Basic knowledge of application support and troubleshooting</li><li>Hands-on experience with ticketing tools (ServiceNow, Jira, etc.)</li><li>Understanding of ITIL-based support processes</li><li>Good communication and user-handling skills</li><li>Ability to work in a fast-paced support environment</li><li>Strong attention to detail and problem-solving mindset</li></ul>POTENTIAL BACKGROUND<ul><li>Minimum 4+ years of experience in Application Support / IT Support</li><li>Experience in handling L1 support activities in enterprise environments</li><li>Familiarity with application monitoring and incident handling</li><li>Exposure to multi-application environments is an advantage</li></ul>CERTIFICATIONS (MANDATORY/PREFERRED)<ul><li>ITIL v4 Foundation (Preferred)</li></ul>LANGUAGE REQUIREMENT<ul><li>Arabic or Non-Arabic Speaker</li></ul>WORK LOCATION<ul><li>Onshore &ndash; Qatar</li></ul>SOFT SKILLS<ul><li>Strong communication and interpersonal skills</li><li>Ability to handle users professionally and patiently</li><li>Quick learner with a proactive attitude</li><li>Ability to work under pressure and manage multiple tickets</li><li>Strong sense of ownership and responsibility</li></ul>If you&rsquo;re interested or have relevant experience, feel free to share your updated CV.Job Type: Full-timePay: QAR10,000.00 - QAR12,000.00 per monthWork Location: In person

Application L1 Support Engineer

<div><h1 class="jobSectionHeader">Cybersecurity Engineer - Sr. Job Description</h1>
Position Title: Cybersecurity Engineer Sr 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Cybersecurity Engineer - Sr. supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cybersecurity engineering, security operations, systems hardening, cloud security, zero trust architecture, and enterprise cyber defense support services. 
The Cybersecurity Engineer - Sr. serves as a senior technical leader responsible for designing, implementing, integrating, securing, and optimizing enterprise security architectures across on-premises, cloud, hybrid, and SaaS environments. The position supports 24x7x365 Security Operations Center (SOC) activities and works closely with federal stakeholders, engineers, SOC analysts, architects, incident responders, and program leadership to enhance the cybersecurity posture of SBA enterprise systems and critical assets.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Provide senior-level cybersecurity engineering support for SBA ECS enterprise cybersecurity operations.</li><li>
Support Task Areas 3.5.3 and 3.5.3.9 by designing, implementing, and maintaining secure enterprise security architectures and cybersecurity engineering solutions.</li><li>
Develop and maintain cybersecurity engineering standards, architecture diagrams, implementation strategies, and technical security documentation.</li><li>
Engineer and implement security controls aligned with NIST, FISMA, Zero Trust Architecture (ZTA), and federal cybersecurity requirements.</li><li>
Design, integrate, configure, and support security technologies including SIEM, SOAR, IDS/IPS, EDR, DLP, MFA, PKI, NAC, firewalls, secure web gateways, and cloud-native security solutions.</li><li>
Provide advanced engineering support for Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network environments.</li><li>
Support cybersecurity monitoring, detection, containment, remediation, and recovery activities within the SOC environment.</li><li>
Perform enterprise systems hardening, vulnerability remediation, security baseline implementation, and secure configuration management.</li><li>
Conduct cybersecurity architecture assessments, threat modeling, security engineering reviews, and technical risk analysis activities.</li><li>
Support implementation and optimization of Zero Trust security capabilities including identity security, micro-segmentation, continuous monitoring, and least privilege access models.</li><li>
Design and implement cybersecurity solutions supporting cloud migration, DevSecOps, container security, and automation initiatives.</li><li>
Support incident response investigations by providing engineering expertise, log analysis, root cause analysis, and remediation recommendations.</li><li>
Collaborate with cybersecurity operations teams to develop detection logic, security use cases, automated workflows, and threat response procedures.</li><li>
Perform system security engineering activities throughout the system development lifecycle (SDLC) and support Authority to Operate (ATO) initiatives.</li><li>
Develop and maintain security architecture roadmaps, engineering plans, and technology modernization strategies.</li><li>
Perform security engineering analysis of enterprise applications, APIs, databases, cloud services, and network infrastructures.</li><li>
Support cybersecurity compliance efforts related to NIST SP 800-53, NIST SP 800-171, FedRAMP, CISA guidance, and federal cybersecurity mandates.</li><li>
Provide technical leadership and mentoring to junior cybersecurity engineers, SOC personnel, and technical staff.</li><li>
Prepare technical reports, engineering documentation, executive briefings, and operational recommendations.</li><li>
Research emerging cyber threats, adversary tactics, and evolving security technologies to improve enterprise defense capabilities.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Systems Engineering, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 10 years of experience supporting cybersecurity engineering, cybersecurity operations, enterprise security architecture, or SOC environments.</li><li>
Demonstrated experience designing and implementing enterprise cybersecurity architectures and engineering solutions.</li><li>
Hands-on experience with SIEM, SOAR, EDR, IDS/IPS, firewalls, vulnerability management, IAM, cloud security, and security automation technologies.</li><li>
Strong knowledge of NIST cybersecurity frameworks, federal security standards, and Zero Trust Architecture principles.</li><li>
Experience supporting Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network infrastructures.</li><li>
Experience performing system hardening, secure configuration management, and vulnerability remediation.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting RMF, ATO, continuous monitoring, and federal cybersecurity compliance activities.</li><li>
Strong analytical, troubleshooting, technical writing, and communication skills.</li><li>
Ability to present technical findings and cybersecurity recommendations to executive leadership and technical stakeholders.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
GIAC Certified Enterprise Defender (GCED)</li><li>
GIAC Security Expert (GSE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA Security+</li><li>
CompTIA CySA+</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Certified: Cybersecurity Architect Expert</li><li>
Cisco Certified CyberOps Professional</li></ul>
Q92uPhlSIK</div>

SBA - Cybersecurity Engineer - Sr

Search 6870+ Incident response engineer jobs near you this May. New roles added regularly across leading industries. Apply today.