incident response lead

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
JOB PURPOSE

To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process. 

Description

Security Incident Response Management

1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.

5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.

6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.

7. Recommend security solutions based on security postures and gaps identified.

8. Manage communication with other departments to facilitate investigation process.

9. Develop and update SLA between SOC and other departments when required and maintain SLA.

Strategy

10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy

Policies, Processes and Procedures

11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.

Day-to-day Management

12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards

Supervision

13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures

Compliance

14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks<div> 
</div></div><div>
Qualifications<div></div> 
Qualifications &amp; Experience
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>

o Certified Information Systems Security Professional (CISSP)

o Certified Information Security Manager (CISM)
<ul><li> Mandatory Certification:</li></ul>

o GIAC Certified Incident Handling (GCIH) 


Skills
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>

Very good MS Office skills 
<div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

HCA Healthcare

<div>Do you have the career opportunities as a(an) Senior Security Threat Engineer you want with your current employer? We have an exciting opportunity for you to join HCA Healthcare which is part of the nation's leading provider of healthcare services, HCA Healthcare.
Job Summary
You will be a Cyber Defender &ndash; serving as the last line of defense between HCA and the threat actors that wish to bring harm to HCA and the patients we serve. You will use state of the art technologies to respond to threats on our network and eradicate them as a member of our Critical Threat Services (CTS) team. As a member of CTS, you will operate along with a small team of like-minded individuals with a passion for cyber security operations.
The Senior Threat Engineer will provide Tier 2, and Tier 3 analysis to cyber security threats and potential incidents. In addition to serving as a Subject Matter Expert on all routine cyber threats, the Senior Threat Response Engineer will be capable of independently leading Major Incident Response teams composed of resources from across the enterprise throughout the cyber incident response process.
Successful candidates will have a passion for cybersecurity and be naturally curious and self-motivated to investigate and discover root cause of events while working in a fast-paced and sometimes stressful environment. Good teamwork and communication skills are also vital. Our team operates as a close-knit group serving a noble purpose &ndash; to win the fight against evil every day.
Note: This position requires rotating on-call coverage/availability for after-hours and holidays as needed.
Major Responsibilities<ul><li>
Major Incident Response &ndash; serve as the lead cyber resource in Major Incident response to execute the IR process and advise the business.</li><li>
Provide guidance to field resources on how to properly remediate a threat.</li><li>
Work closely with other Cyber Defense Center (CDC) team members to improve tools, techniques, and procedures for CDC operation.</li><li>
Continuously improve documentation of work products and processes.</li><li>
Participate in red/blue team exercises.</li><li>
Routinely collaborate with individuals and teams from across the enterprise. Serve as a Subject Matter Expert in all domains related to the CDC</li></ul>
Education &amp; Experience:<ul><li>
Bachelor's degree Preferred</li><li>
5+ years of experience in a relevant field Required &bull;Experience as a member of a Cyber Incident Response Team (CIRT) or comparable</li><li>
Experience executing an Incident Response plan, preferably based on recognized industry standards (e.g. &ndash; NIST, SANS, etc)</li><li>
Experience in Windows Artifact Analysis and Forensic Analysis (e.g. &ndash; Program Execution, File/Folder opening, Account Usage, pulling memory, following proper evidence handling procedures, etc) using industry standard tools and available logs (e.g. &ndash; Endpoint Detection and Response (EDR) tools such as Microsoft Defender Endpoint).</li><li>
Experience in Memory Analysis using tools such as Volatility</li><li>
Experience in network forensic analysis to determine validity of detected events using available network logs collected via SEIM.</li><li>
Experience with an event/information analysis framework such as Analysis of Competing Hypotheses (ACH).</li><li>
Experience in performing security analysis or reporting utilizing Security Incident and Event Management (SIEM) Technologies.</li><li>
Experience with document management and sustaining Security Operations Center (SOC) policies and run book procedures for incident response.</li><li>
Experience with documenting root cause analysis and lessons learned.</li><li>
Experience consuming and generating cybersecurity threat intelligence.</li><li>
Experience across the technology stack. Familiarity with all OSI layers and expertise in some.</li><li>
Experiencing using the following types of security tools:</li><li><ul><li>
SIEM oFirewalls</li><li>
Web Proxy</li><li>
Anti-Virus (AV)</li><li>
Next Gen Anti-Virus (NGAV)</li><li>
Endpoint Detection and Response (EDR)</li><li>
Sandboxing oVirtual Machines</li><li>
Netflow analysis</li><li>
Malware Repositories</li><li>
Threat Intelligence</li><li>
Deception Stack</li><li>
Intrusion Detection/Prevention System (IDS/IPS)</li><li>
Security Orchestration Automation Response (SOAR)</li><li>
Phishing Triage oUser Behavior Analytics (UBA)</li><li>
Email Hygiene and Filtering</li></ul></li><li>
Experience interfacing with peer support teams (Security Engineering, Vulnerability and Patching Teams, Networking, Access Management, Legal, Risk/Governance, etc.)</li><li>
Experience working in a high-tempo, dynamic environment with a high performance team.</li><li>
Experience with work ticketing systems (e.g. &ndash; ServiceNow, JIRA)</li><li>
Experience with Threat Modeling and Kill Chain analysis</li></ul>
Other Qualifications<ul><li>
The successful candidate will possess the following aptitudes and skillsets:</li><li><ul><li>
Leadership ability to independently lead and direct Major Incident Response efforts as well as projects.</li><li>
Excellent critical thinking skills to understand available data and use it to support or refute potential hypothesis that explain the data. Use available data to develop and communicate conclusions and recommendations.</li><li>
An ability to work and thrive in stressful situations. A demeanor that conveys calm professionalism in stressful situations.</li><li>
An ability to maintain confidentiality of sensitive data and to follow proper ethical practices for using tools and accessing data.</li><li>
A strong desire to determine root cause of events. A willingness to fully investigate all alternatives exhaustively until a conclusion can be supported.</li><li>
Ability to self-prioritize tasks based on criticality and threat level.</li></ul></li></ul>
The following certifications and courses are helpful, but, not required:<ul><li>
GIAC: GSEC, GCIH, GCFA, GCIA, GCED, GMON, GCDA, GDAT or comparable</li></ul>
Additional Information<ul><li>
Must live in or near the Greater Area of Nashville, TN</li></ul><h5 class="jobSectionHeader">
Benefits</h5>
HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:<ul><li>
Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health and telemedicine services</li><li>
Wellbeing support, including free counseling and referral services</li><li>
Time away from work programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence</li><li>
Savings and retirement resources, including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling</li><li>
Education support through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing</li><li>
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts</li></ul>
Learn more about Employee Benefits
Note: Eligibility for benefits may vary by location.
HCA Healthcare has been recognized as one of the World's Most Ethical Companies&reg; by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.
&quot;Bricks and mortar do not make a hospital. People do.&quot;- Dr. Thomas Frist, Sr. 
HCA Healthcare Co-Founder
If you are looking for an opportunity that provides satisfaction and personal growth, we encourage you to apply for our Senior Security Threat Engineer opening. We promptly review all applications. Highly qualified candidates will be contacted for interviews. Unlock the possibilities and apply today!
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.</div>

Senior Security Threat Engineer

Akima

<div>Company Overview: 
Work Where it Matters
Akima Global Technology (AGT), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.
At AGT, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.
For our shareholders, AGT provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.
For our government customers, AGT delivers new technologies and partners with leading edge commercial enterprises to deliver unique and innovative IT solutions.
As an AGT employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.
Description:
<div>
Akima is seeking an experienced and forward‑thinking Senior Cybersecurity Support Led to oversee enterprise cyber operations, incident response, and service ticket management across mission‑critical environments. In this senior leadership role, the Lead will direct day‑to‑day cybersecurity operational activities, ensure rapid detection, triage, and resolution of security events while maintain a high‑performing support ecosystem.</div><div> 
</div><div>The ideal candidate will serve as the primary technical authority for cyber operations, partnering closely with engineers, leadership, and external stakeholders to strengthen Military Sealift Command&rsquo;s (MSC) defensive posture and ensure the confidentiality, integrity, and availability of its information systems.</div>
Responsibilities:
<ul><li>Lead and oversee daily cybersecurity operational activities, ensuring continuous monitoring, rapid response, and effective coordination across all cyber support functions.</li><li>
Direct the operation and optimization of security tools, SIEM platforms, endpoint protection technologies, and monitoring systems to ensure high‑fidelity detection and visibility.</li><li>
Establish and enforce operational processes, runbooks, and workflows that enhance efficiency, consistency, and quality of cyber operations.</li><li>
Serve as the senior technical advisor for all cybersecurity incidents, leading triage, investigation, containment, eradication, and recovery efforts.</li><li>
Coordinate cross‑functional response activities, ensuring timely communication, accurate documentation, and integration of lessons learned into future operations.</li><li>
Oversee the development and maintenance of incident response plans, playbooks, and after‑action reporting.</li><li>
Manage and optimize the cybersecurity ticketing lifecycle, ensuring timely assignment, escalation, and resolution of support requests and security events.</li><li>
Track and analyze ticketing trends to identify systemic issues, operational bottlenecks, and opportunities for process improvement.</li><li>
Ensure high‑quality customer service and technical support delivery across all cybersecurity support channels.</li><li>
Provide expert guidance to cybersecurity technicians, and engineering teams on threat detection, response strategies, and operational best practices.</li><li>
Collaborate with system administrators, network engineers, and application teams to validate security controls, troubleshoot complex issues, and support secure system operations.</li><li>
Act as the primary liaison with leadership and external partners for all cyber operations‑related updates, metrics, and recommendations.</li><li>
Develop and maintain operational dashboards, metrics, and reporting mechanisms to provide visibility into cyber operations performance and incident trends.</li><li>
Ensure all operational activities align with NIST, DoD, FISMA, and organizational cybersecurity frameworks and requirements.</li><li>
Continuously evaluate emerging threats, technologies, and operational methodologies, recommending enhancements to strengthen the organization&rsquo;s cyber defense capabilities.</li><li>
Lead training and knowledge‑sharing initiatives to elevate the technical proficiency of the cybersecurity support workforce.</li></ul><div>
This role is based out of Norfolk, VA, and provides support to Ashore and Afloat cybersecurity operations as required for advanced Cybersecurity Operations and Incident Response services. The Senior Cybersecurity Support Lead will play a critical role in safeguarding MSC&rsquo;s systems and data, ensuring mission readiness and resilience against evolving cyber threats.</div>
Qualifications:
<ul><li>An Active SECRET clearance is required for consideration</li><li>
Bachelor's degree with at least 10 years of relevant experience required; or greater than 15 years of relevant experience required in leu of degree is required.
</li><li>IAM III level Certification such as CEH, GCIH, CASP+ CE, CISSP is required; IAT III level certification is preferred.</li></ul><div>
Navy Enterprise Service Desk (NESD) and HELIX experience is preferred.</div>
Job ID: 2026-22829 Work Type: On-Site</div>

Senior Cyber Security Support - Lead

Follett Content Solutions LLC

<div>Description:

Follett Content Solutions has been a trusted partner for educators since 1873! We support our educators that reach more than 45 million students worldwide. Follett Content Solutions helps build a diverse collection of print and digital resources to support every student. We are currently hiring for an Cybersecurity Program Lead in our office. This is a full-time exempt position located in McHenry, IL. This position is a hybrid position requiring you to be in the office Monday, Tuesday, &amp; Thursdays with Wednesday &amp; Friday work from home days. The pay for this position is $100,000 - $125,000 annually. We offer an array of benefits, to see those benefits click here.
Any pay range disclosed is based upon a combination of neutral factors such as required qualifications, experience, education, skill, training, certifications, seniority, etc. Follett Content Solutions reserves the right to provide any successful candidate with a salary at the most appropriate level set as a result of such candidate&rsquo; qualifications, experience, education, skill, training, certifications, location or seniority.
Position Overview
The Cybersecurity Lead is responsible for safeguarding the confidentiality, integrity, and availability of Follett&rsquo;s systems, data, and cloud environments. This role serves as the primary technical authority for cybersecurity across the organization, leading the design, implementation, and continuous improvement of security controls in a hybrid on-premise and cloud environment.
The Cybersecurity Lead partners closely with Infrastructure, Networking, Application Development, and Legal/Governance stakeholders to ensure security is embedded into daily operations, modernization initiatives, and long-term architectural planning. This role owns incident response and threat detection activities, leads cloud and application security efforts, and provides technical support for governance and compliance programs.
As the organization expands its use of AI tools and modern development workflows, the Cybersecurity Lead plays a critical role in ensuring secure integration, proper logging, responsible use, and adherence to internal security standards. The ideal candidate brings strong hands-on experience with Azure security, modern development practices, endpoint protection, and threat detection engineering.
Key Responsibilities:
Incident Response &amp; Threat Detection<ul><li>
Serves as the primary responder for security incidents across cloud, endpoint, and network environments.</li><li>
Collaborates with the Rapid7 SOC to validate alerts, tune detections, and improve response workflows.</li><li>
Conducts threat hunting and telemetry analysis within SentinelOne and other security platforms.</li><li>
Leads containment and remediation efforts in partnership with Infrastructure, Networking, and Application teams.</li><li>
Develops and refines detection logic, response playbooks, and escalation procedures.</li></ul>
Cloud, Application &amp; AI Security<ul><li>
Designs and implements security controls for Azure workloads, identity, and cloud-native services.</li><li>
Partners with Application Development to integrate secure coding practices, API security, and threat modeling into the SDLC.</li><li>
Establishes standards for secure use of AI tools, including logging, access controls, and data protection requirements.</li><li>
Supports security considerations for business application modernization initiatives</li><li>
Evaluates and recommends cloud and application security tools, patterns, and architectures.</li></ul>
Security Engineering &amp; Endpoint Oversight<ul><li>
Leads configuration, tuning, and continuous improvement of security technologies including SentinelOne, Microsoft Defender, Purview, Action1, and SIEM integrations.</li><li>
Develops and maintains security baselines for servers, endpoints, and cloud resources.</li><li>
Ensures endpoint coverage and agent health across the environment, partnering with the Service Desk for deployment and remediation.</li><li>
Implements automation and scripting to improve security operations and reduce manual effort.</li></ul>
Vulnerability Management<ul><li>
Owns the vulnerability management lifecycle using Rapid7, including scan tuning, prioritization, and reporting.</li><li>
Identifies and escalates critical vulnerabilities requiring immediate remediation.</li><li>
Coordinates with Infrastructure, Networking, and Development teams to track and validate remediation progress.</li><li>
Provides actionable guidance to reduce risk across cloud, endpoint, and network environments.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Engineering, or related discipline OR equivalent training/professional experience.</li><li>
5+ years of hands-on experience in cybersecurity engineering, cloud security, application security, or related technical security roles preferred; candidates with fewer years but exceptional aptitude, development experience, or demonstrated security capability will be considered.</li><li>
Strong written and verbal communication skills with the ability to collaborate effectively across Infrastructure, Networking, Development, and Legal/Governance teams.</li><li>
3+ years of experience securing cloud environments, preferably Microsoft Azure (Entra ID, Defender, Purview, workload protection, identity governance).</li><li>
Demonstrated experience with application security concepts, including secure coding practices, API security, threat modeling, and working directly with development teams.</li><li>
Familiarity with AI/ML security considerations, including data protection, access controls, logging, and responsible use of AI tools in enterprise environments.</li><li>
Experience with vulnerability management platforms (Rapid7 preferred), including scan tuning, prioritization, and remediation workflows.</li><li>
Strong understanding of identity and access management, authentication technologies, role-based authorization, and zero-trust principles.</li><li>
Working knowledge of risk assessment methodologies, threat modeling, and security control frameworks (NIST CSF, CIS Controls, SOC 2).</li><li>
Ability to translate business requirements and risks into secure technical solutions and actionable remediation guidance.</li><li>
Technical proficiency with endpoint protection, cloud security tools, scripting/automation, and hybrid infrastructure environments.</li><li>
Experience collaborating with third-party providers, SOC partners, auditors, or managed service providers.</li><li>
Self-driven, highly motivated, and able to manage multiple priorities in a fast-moving environment.</li><li>
Strong analytical, troubleshooting, and problem-solving skills with a team-oriented mindset.</li><li>
Demonstrated ability to operate as a Lead/IC, taking ownership of security engineering, incident response, and cross-functional coordination in a lean IT environment.</li><li>
Experience supporting security considerations during business application modernization initiatives.</li><li>
Position requires you to be on call 24/7</li><li>
AZ 500, AZ 104, CCSK/CCSP, Security+, CySA+, CISSP, or equivalent cloud/security credentials highly preferred.</li></ul>
We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment, without regard to race, color, religion, national origin, pregnancy, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status, or other characteristics protected by law. As an Equal Opportunity Employer, we are committed to providing reasonable accommodations to job applicants with disabilities. If you are interested in applying for employment and need assistance or an accommodation in the application process due to a disability, please contact us by email or phone.<ul><li>
 Email: Send request to fcshr@follettcontent.com</li><li>
 Phone: Request assistance by calling 800.773.7010 x45130</li></ul>
When contacting us, please provide your contact information, the job position or title, and state the nature of your accessibility issue.</div>

Cybersecurity Program Lead

Qiddiya Investment Company

<div>Qiddiya Investment Company is seeking an experienced and strategic Manager - Cybersecurity Threat Management to lead our threat management initiatives. In this leadership role, you will be responsible for overseeing the detection, analysis, and mitigation of cybersecurity threats to safeguard the organization's critical information assets and infrastructure.
You will drive the development and execution of advanced threat intelligence programs and incident response strategies, collaborating with various teams to ensure a proactive and effective security posture.
Key Responsibilities<ul>
<li>Lead the cybersecurity threat management program, including threat intelligence collection, analysis, and dissemination.</li>
<li>Oversee incident detection and response activities, ensuring timely and effective handling of security incidents.</li>
<li>Develop and implement advanced threat hunting and mitigation strategies tailored to organizational risks and needs.</li>
<li>Collaborate with internal and external stakeholders to enhance threat intelligence sharing and coordination.</li>
<li>Manage and mentor the cybersecurity threat management team, fostering skill development and knowledge sharing.</li>
<li>Prepare and present threat intelligence reports and risk assessments to senior leadership and stakeholders.</li>
<li>Stay abreast of emerging threats, tactics, and technologies, integrating new knowledge into threat management processes.</li>
<li>Ensure compliance with relevant cybersecurity standards, policies, and regulations.</li> 
</ul> 
 
Requirements 
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, or a related field.</li>
<li>6+ years of experience in cybersecurity threat management, incident response, or related fields.</li>
<li>Deep understanding of threat intelligence frameworks, security operations, and incident response methodologies.</li>
<li>Proven leadership and team management experience.</li>
<li>Familiarity with advanced threat detection tools and technologies.</li>
<li>Excellent analytical, communication, and interpersonal skills.</li>
<li>Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Threat Intelligence Analyst (CTIA), or GIAC Certified Incident Handler (GCIH) are highly desirable.</li> 
</ul> 
 
Benefits 
Comprehensive benefits package</div>

Manager - Cybersecurity Threat Management

Openkyber

<div>Role Overview, The SOC Lead / Incident Manager will oversee 24x7x365 Security Operations Center (SOC) functions for the Congressional Budget Office vSOC program. This role requires strong leadership in incident response, SLA enforcement, and team management, with hands-on expertise in Microsoft Sentinel and Defender environments. The SOC Lead will serve as the escalation authority, ensuring operational excellence, audit readiness, and compliance with federal frameworks such as NIST SP 800-53 and FISMA .
Key Responsibilities
<ul><li>Lead Tier I/II/III SOC operations with full escalation authority.</li>
<li>Enforce SLA-driven performance standards ( 15 min triage, 1 hr investigation, 2 hr escalation).</li>
<li>Oversee the incident lifecycle from triage through investigation, response, and closure.</li>
<li>Act as incident commander during high-severity events, coordinating stakeholder communication.</li>
<li>Review and approve incident classifications, escalations, and remediation actions.</li>
<li>Conduct daily/weekly operational reviews, tracking incident trends and performance metrics.</li>
<li>Collaborate with engineering teams to improve detection rules and reduce false positives.</li>
<li>Ensure all incidents are documented and audit-ready for compliance assessments.</li>
</ul>Required Skills &amp; Qualifications
<ul><li>8 10+ years of experience in SOC operations and incident management .</li>
<li>Strong expertise in Microsoft Sentinel, Defender XDR , and SIEM/SOAR platforms (Splunk, QRadar, ELK).</li>
<li>Proven ability to lead cross-functional SOC teams and enforce SLA compliance.</li>
<li>Hands-on experience with ServiceNow, Jira, Power BI, KQL, and Log Analytics .</li>
<li>Deep knowledge of NIST SP 800-53, NIST 800-61, FISMA, and FedRAMP frameworks.</li>
<li>Certifications (Preferred / Mandatory) CISSP (Certified Information Systems Security Professional) GIAC (GCIH / GCIA / GCFA) Microsoft Certified: Security Operations Analyst (SC-200) ITIL / PMP (optional but valuable for governance)</li>
</ul>PALNAR, the trade name of Palayekar Companies Inc. founded in 1997, delivers global software and technology services. Headquartered in Cranbury, New Jersey - United States, with operations in India (Noida and Goa), OpenKyber provides software consulting, development, IT Support service and ongoing technology support worldwide.
For applications and inquiries, contact: hirings@openkyber.com</div>

SOC Manager

Concentrix

<div>
 
 Job Title
 
 
 
 Cloud Resiliency Architect with English and Arabic
 
 
 We are seeking a Resiliency Engineer to lead advisory workshops for our clients with developing cloud architectures. The successful candidate will play a critical role in advising on and designing strategies that enhance the resilience of cloud environments. The focus is on concepts and practices including high availability, disaster recovery planning, business continuity planning, major incident response plans, and formal risk assessments.
 
 
 
 Languages: French and English
 
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Lead advisory workshops to assist clients in building resilient cloud architectures.
 </li>
 <li>
 Advise on strategies to improve system reliability and availability.
 </li>
 <li>
 Develop and implement disaster recovery and business continuity plans.
 </li>
 <li>
 Conduct formal risk assessments to identify potential vulnerabilities.
 </li>
 <li>
 Design major incident response plans to mitigate and manage disruptions effectively.
 </li>
 <li>
 Collaborate with client teams to understand their architectural needs and provide tailored solutions.
 </li>
 <li>
 Educate clients on best practices for building resilient systems.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 A minimum of 3 years of experience in cloud resiliency engineering or related fields.
 </li>
 <li>
 Demonstrated exposure to Site Reliability Engineering concepts.
 </li>
 <li>
 Strong understanding of high availability, disaster recovery, and business continuity planning.
 </li>
 <li>
 Experience in conducting risk assessments and developing incident response plans.
 </li>
 <li>
 Ability to communicate complex technical concepts to non-technical stakeholders.
 </li>
 <li>
 Excellent interpersonal and communication skills, with the ability to lead workshops and engage with diverse client teams.
 </li>
 </ul>
</div>

Cloud Resiliency Architect with English and Arabic

Search 10000+ Incident response lead jobs near you this May. New roles added regularly across leading industries. Apply today.