operations manager

key account manager

public relations officer

relationship manager

hr intern

incident response manager

Client of Tandem Search

<b>Key Results Area:</b>
<ul>
 <li><b>Strategic Oversight:</b> Provide strategic direction and oversight for the incident management process, ensuring alignment with organizational goals and objectives.</li>
 <li><b>Security Incident Management:</b> Lead the coordination of major security incidents/crisis management, ensuring that all relevant teams and stakeholders are effectively engaged and provide appropriate technical insights to the Crisis Management Team (CMT).</li>
 <li>managing incident investigation, analysis, containment, recovery, communication, and reporting</li>
 <li><b>Policy and Procedure Development:</b> Develop and refine incident management policies and procedures, ensuring they are up-to-date and effective in addressing current and emerging threats.</li>
 <li><b>Continuous Improvement:</b> Conduct thorough post-incident reviews to identify lessons learned and implement improvements to prevent future incidents.</li>
 <li><b>Training and Mentorship:</b> Provide training and mentorship to other team members, ensuring the team is well-prepared to handle incidents.</li>
 <li><b>Stakeholder Communication:</b> Maintain clear and effective communication with stakeholders, providing updates on incident status and resolution efforts.</li>
</ul>
<div> <b>Key Principles:</b>
<ul>
 <li><b>Alignment with Business Priorities:</b> Ensure alignment with organizational goals and objectives</li>
 <li><b>Ownership and Accountability:</b> Incident Manager takes full responsibility for the activities and the department s, holding themselves and the team accountable for their outcomes.</li>
 <li><b>Driving Incident Response Maturity Enhancement:</b> Proactively drives initiatives that enhance incident response and resilient cyber posture.</li>
 <li><b>Focus on Outputs and Impact:</b> Focus on delivering outputs that create meaningful impact, such as enhanced security culture and protection posture of the bank.</li>
 <li><b>Innovation and Automation:</b> Continuously seek innovative solutions and automated processes for efficiency.</li>
 <li>Continuous Learning and Improvement: Committed to learning from experiences and continuously improving relevant processes and outcomes.</li>
</ul>
<div> <b>Knowledge, Skills, and Experience:</b>
 <b>Essential knowledge</b>
<ul>
 <li>Have over 12+ years of rich experience in the information security domain and at least 6-8 years of dedicated experience in Security Incident Response.</li>
 <li>Hands-on experience in implementing and operationalizing SIEM/SOAR tools such as Sentinel, ArcSight, etc.</li>
 <li>Experience in defining and reporting KPIs for Security Incident response.</li>
 <li>Familiarity with advanced SOC monitoring technologies, risk, threat, and security measures.</li>
 <li>Knowledge across the SOC domains, including governance, control frameworks, policies, compliance management, risk management, and incident response, etc.</li>
 <li>Comprehensive knowledge of regulatory and compliance requirements and how they influence the bank's Information Security strategy.</li>
 <li>Preferably worked in the BFSI domain with proven experience in the SOC function.</li>
 <li>Strong understanding of key security standards and regulations such as NIST 800-61, CERT/CC, PCI, ISO 27035, etc.</li>
</ul>
 <b>Skills and Application</b>
<ul>
 <li>Leads the development and implementation of comprehensive Security Governance strategies that address identified risks and compliance requirements, incorporating advanced technologies and methodologies to enhance security posture.</li>
 <li>Deep understanding of Security Incident response frameworks and their application in creating robust policies.</li>
 <li>Automate potential resilient security processes to ensure continuous compliance with security best practices.</li>
 <li>Maintaining up-to-date knowledge of security trends, threats, and countermeasures.</li>
 <li>Assess and design security posture determination processes, tools, and methodologies</li>
 <li>Reviewing and approving use cases/playbooks for SIEM/SOAR tools.</li>
 <li>Continuously monitor security hygiene and performance using tools and processes</li>
 <li>Collaborate with other IS teams, Ops, and tech teams on enhancing security incident response resilience.</li>
</ul>
<div><br><ul>
</ul>
</div>
</div>
</div>

AVP Security Incident Management

Commercial Bank of Dubai

<p><br></p> <p> <strong>Job Purpose </strong> </p> <p>Lead CBD's security operations and manage incident response efforts. This role is critical in supporting the CISO office and ensuring the security and resilience of our IT infrastructure and protecting our bank's data and systems from cyber threats.</p> <p> <br> </p> <p> <strong>Principle Accountabilities </strong> </p> <p> <br> </p> <ul> <li>Oversee the daily operations of the Security Operations Center (SOC) working across 1LoD &amp; 2LoD security teams.</li> <li>Develop and implement security monitoring and incident detection strategies.</li> <li>Ensure the effective use of security tools and technologies to protect the bank's assets.</li> <li>Monitor security alerts and manage the response to potential security incidents.</li> <li>Support the CISO office Conduct regular security assessments and audits to identify vulnerabilities.</li> <li>Own the incident response plan to address security breaches and incidents.</li> <li>Lead the incident response team in investigating and resolving security incidents. (24/7 rota with leadership team)</li> <li>Coordinate with internal and external stakeholders during incident response activities.</li> <li>Conduct post-incident reviews and implement lessons learned to improve security measures.</li> <li>Ensure timely and accurate reporting of security incidents to relevant authorities and stakeholders.</li> <li>Develop and maintain a threat intelligence program to identify and analyze emerging threats.</li> <li>Collect, analyze, and disseminate threat intelligence to relevant stakeholders.</li> <li>Collaborate with external threat intelligence providers and industry peers to stay informed about the latest threats.</li> <li>Integrate threat intelligence into security operations and incident response processes.</li> <li>Provide actionable intelligence to enhance the bank's security posture and mitigate risks.</li> <li>Support risk assessments and vulnerability analysis to identify potential threats (ISMS/Projects/Change/Thematic).</li> <li>Support threat modelling as part of DevSecOps and other change activity.</li> </ul>", "order": 1}, {

Senior Manager, Security Operations & Incident Management

KAWADER Human Resources Consultancy L.L.C.

<p>Not limited to the below - </p><br/><h3><strong>1. Business Continuity Planning</strong></h3><ul><li>Develop, implement, and maintain business continuity and disaster recovery plans across the organization.</li><li>Identify critical business functions and develop recovery strategies to ensure minimal disruption.</li><li>Conduct Business Impact Analysis (BIA) to assess potential risks and their effect on operations.</li></ul><h3><strong>2. Risk Assessment and Management</strong></h3><ul><li>Identify, assess, and monitor operational, financial, and strategic risks.</li><li>Collaborate with departments to establish mitigation measures for key business risks.</li><li>Ensure alignment of resilience strategies with the enterprise risk management framework.</li></ul><h3><strong>3. Crisis Management and Incident Response</strong></h3><ul><li>Develop and maintain crisis management frameworks and response protocols.</li><li>Lead or support the organization’s response during emergencies, ensuring timely communication and decision-making.</li><li>Conduct post-incident reviews and lessons-learned analyses.</li></ul><h3><strong>4. Policy Development and Governance</strong></h3><ul><li>Establish and maintain business resilience policies, standards, and procedures.</li><li>Ensure compliance with relevant regulations, ISO standards (e.g., ISO 22301), and industry best practices.</li><li>Prepare reports and updates for senior management and governance committees.</li></ul><br/>

Job Opportunity for Business Resilience Manager (BRM)

Emirates NBD

<div>
 <p>
  <strong>
   <u>
    COMPANY INTRODUCTION
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Emirates NBD is a market leader across the MENAT (Middle East, North Africa and T&uuml;rkiye) region with a presence in 13 countries, serving over 20 million customers. The Emirates NBD Group has a total of 853 branches and 4,213 ATMs / SDMs. Emirates NBD is the leading financial services brand in the United Arab Emirates with a Brand value of USD 3.89 billion.
 </p>
 <p>
  <br/>
 </p>
 <p>
  At the bank, we serve our customers and help them realize their financial objectives through a range of banking products and services including retail banking, corporate &amp; institutional banking, Islamic banking, investment banking, private banking, asset management, global markets and treasury, and brokerage operations.
 </p>
 <p>
  <br/>
 </p>
 <p>
  The formation of the Group Information Security function is to ensure Emirates NBD information and data is resilient against external and internal security threats embed information security mindset as a core element of organization business strategy and provide an independent &amp; objective view of Emirates NBD Security posture to the management committees. The unit exists to provide secure banking environment for our customer and employees.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    JOB PURPOSE
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  The
  <strong>
   Manager - Forensics &amp; Incident Response
  </strong>
  will:
 </p>
 <ul>
  <li>
   Manage the Digital Forensics and Incident Response efforts of Cyber Security team within Emirates NBD.
  </li>
  <li>
   Effectively ensuring threats are appropriately analyzed and efforts for remediation of threats are well coordinated.
  </li>
  <li>
   Learnings from incidents are fed into SOC to help ensure similar threats are pro-actively mitigated.
  </li>
  <li>
   Manage the incident processes to ensure they are well drilled and effective.
  </li>
  <li>
   Maintain acceptable cyber hygiene levels and ensure the goals of the unit are met.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Digital Forensics
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Manage and conduct the analysis of computer, public cloud and network traffic for the purposes of information gathering, legal evidence and intrusion detection.
  </li>
  <li>
   Manage and conduct network forensics for pro-active investigation.
  </li>
  <li>
   Manage and conduct the collection, identification and validation of digital information for the purpose of reconstructing past events.
  </li>
  <li>
   Manage the efforts to maintain chain of custody for computer evidence.
  </li>
  <li>
   Ensure superior documentation and record keeping for regulatory audit purposes.
  </li>
  <li>
   Link investigative reports and findings to financial crime and provide estimates on potential impact (financial, reputation, strategic or others)
  </li>
  <li>
   Perform actions within the boundaries of the legal framework of the country and liaise with 3rd parties (Government Entities and Vendors) on guidance and actions.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Incident Management
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Lead the investigation and/or containment teams during an incident.
  </li>
  <li>
   Present technical findings (investigative or otherwise) to senior management.
  </li>
  <li>
   Prepare and meet SLA&rsquo;s defined for Incident Management.
  </li>
  <li>
   Prepare and provide relevant reports for identified incidents.
  </li>
  <li>
   Prepare and maintain relevant documentation for Incident Management.
  </li>
  <li>
   Ensure the relevant documentation is kept up to date at all times.
  </li>
  <li>
   Proactively identify gaps and remediate them to keep observations from Auditors and Regulators to a minimum.
  </li>
  <li>
   Manage the CSIRT during security incidents.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Security Monitoring
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Assist in the Cyber Security Monitoring Operations of the Bank.
  </li>
  <li>
   Keep up to date on the latest security threats and feed them into the Monitoring Operations to help ensure those are pro-actively detected and mitigated in the Bank.
  </li>
  <li>
   Assist in the timely reporting of Security incidents to relevant stakeholders.
  </li>
  <li>
   Assist in ensuring Monitoring should be continuous, covering 24/7 operations.
  </li>
  <li>
   Assist in the preparation and maintenance of relevant documentation for Cyber Security team.
  </li>
  <li>
   Highlight gaps and recommend sound security practices to improve the monitoring.
  </li>
  <li>
   Be a cost-effective solutions provider for security gaps.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Threat Hunting
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Proactively and iteratively search through networks and datasets to detect advanced threats that evade automated tools.
  </li>
  <li>
   Use both manual and machine assisted techniques to find the Tactics, Techniques and Procedures of advanced adversaries.
  </li>
  <li>
   Trace attacker paths and detect suspicious patterns of threat actors.
  </li>
  <li>
   Research innovative methods for making Threat Hunting more efficient and effective.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    People Management
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Ensure that security SMEs reporting to this role maintain quality.
  </li>
  <li>
   Coach, mentor and manage security SMEs to ensure quality delivery
  </li>
  <li>
   Assist security engineers in decision making when it comes to security incidents.
  </li>
  <li>
   Manage conflicts within the team.
  </li>
  <li>
   Identify and ensure team and self is kept up to date with highest level of technical acumen.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Project Management
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Suggest new solutions to improve the Security Monitoring posture of the Group.
  </li>
  <li>
   Conduct PoCs for new technologies which could help uplift the level of Security within the Group.
  </li>
  <li>
   Run security projects end to end where necessary.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    KEY REQUIREMENTS
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Education
  </strong>
 </p>
 <ul>
  <li>
   <em>
    ESSENTIAL:
   </em>
   Bachelor's degree in a computer-related field such as Computer Science, Management Information System or Information Science or Mathematics
  </li>
  <li>
   <em>
    DESIRABLE:
   </em>
   Master&rsquo;s degree in Business Administration, Information Security, Human Resource Management, Finance or International Business or Executive Education from reputed institutes like Harvard
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Certifications
  </strong>
 </p>
 <ul>
  <li>
   <em>
    DESIRABLE:
   </em>
   GREM, GCIH, GCFA, OCSP, CISSP
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experiences
  </strong>
 </p>
 <ul>
  <li>
   Minimum 5+ years of demonstrable experience leading technical security incident response and digital investigations in large-scale, high-traffic environment.
  </li>
  <li>
   7-10+ years of Technology experience (overall)
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Knowledge
  </strong>
 </p>
 <ul>
  <li>
   Strong communication and interpersonal skills geared to getting things done while continuously developing themselves and the talent within their charge
  </li>
  <li>
   In-depth understanding of threat management and security incident response protocols to go along with excellent reasoning and problem-solving skills
  </li>
  <li>
   A high level of familiarity with malicious code threats as well as common attack and penetration techniques used by adversaries
  </li>
  <li>
   Demonstrable experience with: forensic techniques and toolsets; most major host operating systems and file system types; analysis of many different types of security logs
  </li>
  <li>
   Expert understanding of Netwoking Concepts and Security Technologies.
  </li>
  <li>
   Deep knowledge of Incident Management Processes.
  </li>
  <li>
   Expert understanding of a company&rsquo;s business processes, technology and information systems.
  </li>
  <li>
   Must have knowledge on application, public cloud and infrastructure security threats and mitigating measures
  </li>
  <li>
   Deep knowledge on all aspects of Information Security concepts from broad range of technical and non- technical areas.
  </li>
  <li>
   Good negotiation skills will be desirable
  </li>
  <li>
   Ability to understand regulatory requirements and process efficiency frameworks
  </li>
  <li>
   Ability to understand the details of ground level security issues, and its management
  </li>
  <li>
   Ability to monitor and enforce improvements when necessary, in line with regulatory requirements or best practices
  </li>
  <li>
   Good knowledge of risk management frameworks and how to identify, manage and mitigate risk
  </li>
  <li>
   Ability to create and review security policies, standards, procedures and hardening baselines
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Skills
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Superior written and verbal communication skills in order to effectively communicate security threats and recommendations to technical or non-technical stakeholders
  </li>
  <li>
   Good hands on experience with infrastructure technologies that involve perimeter protection, core protection and end-point protection/detection
  </li>
  <li>
   Should be able to conduct Digital Forensics and Malware Assessments
  </li>
  <li>
   Penetration testing experience is desirable. Must be able to understand and mitigate security issues that relate to applications.
  </li>
  <li>
   Takes responsibility and ownership for the security of projects that are assigned to them
  </li>
  <li>
   Should have good project management &amp; execution skills with respect to tasks and ensure completion
  </li>
  <li>
   Process Oriented skills are advantageous
  </li>
  <li>
   Coding &amp; Programming skills are advantageous
  </li>
  <li>
   Experience with technologies/concepts such as OAuth, AI, Blockchain, Robotics, SecDevOps, SAML, OWASP Top 10
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    WHY JOIN US
   </u>
   ?
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  We aspire to be an employee&rsquo;s employer of choice. We believe, we can help you realize your true potential by providing the right opportunities. At Emirates NBD we are reimagining the future of work so that you can unlock your potential, every day we want to ensure, every employee can exceed in the future of work by upskilling, building new digital skills and knowledge. Our goal is to empower our employees to build career experiences and skills they need in the future and that will produce a great outcome for our bank as well, we want our employees no matter their background, location, preferences to feel engaged to one Emirates NBD team.
 </p>
 <p>
  <br/>
 </p>
 <p>
  We encourage interested candidates to review the key responsibilities and qualifications for each role and apply for any positions that match their skills and capabilities. ENBD is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment, however due to high volume of applicants, only SHORTLISTED candidates will be contacted.
 </p>
</div>


Manager - Forensics & Incident Response

DXC Technology

<p><b>Job Description:</b></p><p>The Service Manager has a daily operations responsibility to run and manage the processes execution (i.e. Incident, Change, Problem Management and Capacity Management).</p><p>Ensure delivery teams are aware of all the processes, procedures and available documentation.</p><p>Participate to internal delivery reviews and meetings, drives delivery toward excellence and proactivity.</p><p><b>Communication</b></p><p>Interfacing with the client IT Leadership and VIP community members.</p><p>Interfacing with Customer counterparts (Process owners, Service Management Function).</p><p>Communicate service status and issues to Client IT Leadership.</p><p><b>Incident Management</b></p><p>Manage the incident lifecycle, including detection, logging, classification, prioritization, investigation, resolution, and closure of incidents.</p><p>o Coordinate with IT teams and service desk to ensure timely resolution of incidents and minimize downtime.</p><p>o Escalate incidents as necessary according to established escalation processes.</p><p>o Communicate incident status, impact, and resolution progress to stakeholders, including users and management.</p><p>o Conduct post-incident reviews to identify root causes and ensure continuous improvement in incident management processes.</p><p>o Maintain and update the incident management process documentation and ensure compliance with ITIL or other relevant frameworks.</p><p>o Develop and deliver training on incident management processes and tools to IT staff.</p><p>o Collaborate with Problem and Change Managers to ensure seamless coordination between incident, problem, and change management processes.</p><p><b>Skills &amp; Requirements</b></p><p>o Expertise in incident management and coordination.</p><p>o Strong analytical and problem-solving skills.</p><p>o Excellent communication and interpersonal skills.</p><p>o Ability to work under pressure and manage high-stress situations.</p><p>o Strong organizational and multitasking skills.</p>

On-site - Incident Manager

help AG

<div><p>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist (U.A.E National) who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li><p>
Lead incident response engagements in unknown environments until all threats are remediated.</p></li><li><p>
Develop custom incident response plans tied to specific environments and customer situations.</p></li><li><p>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</p></li><li><p>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</p></li><li><p>
Reverse engineer malicious software and develop signatures and indicators of compromise.</p></li><li><p>
Actively develop incident response tools, scripts, and various detection content.</p></li><li><p>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</p></li><li><p>
Articulate and execute common Incident Response methods (e.g. SANS).</p></li><li><p>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</p></li><li><p>
Work on-site as required with clients during Live Security Incidents.</p></li><li><p>
Maintain a high degree of awareness of the current threat landscape.</p></li><li><p>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</p></li><li><p>
Create and present customer reports to ensure quality, accuracy and value to the client.</p></li><li><p>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</p></li><li><p>
Perform other essential duties as assigned.</p></li></ul><p></p><p><b><br>
Qualifications &amp; Skills:</b></p><p></p><ul><li><p>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</p></li><li><p>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</p></li><li><p>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</p></li><li><p>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</p></li><li><p>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</p></li><li><p>
Should have <b>at least</b> one of the below <b>ACTIVE </b>certifications as a mandatory requirement:</p></li></ul><p>
CREST Certified Registered Intrusion Analyst (CRIA)<br>
GIAC Cloud Forensics Responder (GCFR)<br>
GIAC Certified Forensic Analyst (GCFA)</p><p>
CREST Certified Host Intrusion Analyst (CC-HIA)<br>
CREST Certified Network Intrusion Analyst (CC-NIA)</p><p>
CREST Certified Incident Manager (CC-IM)</p><p>
CREST Certified Threat Intelligence Manager (CC-TIM)<br>
GIAC Reverse Engineering Malware (GREM)</p><ul><li><p>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</p></li><li><p>
Deep TCP/IP knowledge, networking and security product experience.</p></li></ul><ul><li><p>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</p></li><li><p>
Rapid development in scripting languages: Python/PowerShell /Bash.</p></li><li><p>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</p></li><li><p>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</p></li><li><p>
Demonstrable experience in analysing and interpreting system, security and application logs.</p></li><li><p>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</p></li><li><p>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</p></li><li><p>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</p></li><li><p>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</p></li></ul><p></p><p><b>
Benefits:</b></p><p></p><ul><li><p><br>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/Hybrid working environment.</p></li><li><p>
Open door policy.</p></li></ul><p></p><p><b><br>
About Us:</b></p><p></p><p><br>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Incident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)

Accenture

<div><span style="font-size: 11px;"><b>Job Summary:</b></span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">The IT/OT SOC Delivery Lead is responsible for managing and delivering security operations across both IT (Information Technology) and OT (Operational Technology) environments. This role ensures comprehensive threat detection, response, and monitoring capabilities for corporate systems and industrial control systems (ICS/SCADA). The ideal candidate has deep knowledge of cybersecurity frameworks, IT/OT convergence challenges, and a proven track record in leading SOC operations in critical infrastructure sectors.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;"><b>Key Responsibilities:</b></span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">SOC Management &amp; Delivery:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Lead end-to-end delivery of SOC services for both IT and OT environments, including 24/7 monitoring, detection, and incident response.</span></div><div><span style="font-size: 11px;">Manage a team of SOC analysts, threat hunters, and incident responders aligned with both IT and OT domains.</span></div><div><span style="font-size: 11px;">Oversee SOC operational processes, including alert triage, escalation, incident handling, and post-incident reviews.</span></div><div><span style="font-size: 11px;">Ensure efficient service delivery by managing SLAs, KPIs, and continuous improvement metrics.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">IT/OT Cybersecurity Integration:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Drive alignment between IT and OT security operations to support a converged cyber defense strategy.</span></div><div><span style="font-size: 11px;">Collaborate with IT, OT, engineering, and plant operations teams to ensure risk-based visibility and protection.</span></div><div><span style="font-size: 11px;">Lead integration of data sources from ICS, SCADA, DCS, PLCs, HMIs, and enterprise IT infrastructure into SIEM/SOAR platforms.</span></div><div><span style="font-size: 11px;">Develop and refine OT-specific detection use cases and playbooks tailored to industrial threats.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Threat Intelligence &amp; Response:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Monitor evolving threats, vulnerabilities, and attack vectors targeting both IT and OT systems.</span></div><div><span style="font-size: 11px;">Lead proactive threat hunting and analysis activities across IT/OT landscapes.</span></div><div><span style="font-size: 11px;">Coordinate incident response activities including containment, investigation, recovery, and root cause analysis.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Governance &amp; Compliance:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Ensure adherence to industry standards and regulatory frameworks such as NIST CSF, IEC 62443, ISO 27001, and NERC CIP.</span></div><div><span style="font-size: 11px;">Support audits, risk assessments, and cyber resilience exercises involving IT/OT infrastructure.</span></div><div><span style="font-size: 11px;"><b><br></b></span></div><div><span style="font-size: 11px;"><b>Required Qualifications:</b></span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Bachelor's degree in Cybersecurity, Engineering, Computer Science, or a related field.</span></div><div><span style="font-size: 11px;">14+ years of experience in cybersecurity operations, with at least 10 years in a leadership role covering both IT and OT domains.</span></div><div><span style="font-size: 11px;">Strong knowledge of IT security practices, SOC operations, and ICS/SCADA/OT systems.</span></div><div><span style="font-size: 11px;">Experience with SIEM, SOAR, EDR, IDS/IPS, and network security tools (e.g., Splunk, QRadar, Sentinel, Nozomi, Dragos).</span></div><div><span style="font-size: 11px;">Familiarity with protocols and systems common in OT (e.g., Modbus, DNP3, OPC, Siemens, Rockwell).</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Preferred Qualifications:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Relevant certifications: CISSP, GICSP, GCIA, SANS ICS410/515, CISM, or equivalent.</span></div><div><span style="font-size: 11px;">Experience in oil &amp; gas, utilities, energy, or other critical infrastructure sectors.</span></div><div><span style="font-size: 11px;">Strong leadership, communication, and stakeholder management skills.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Key Competencies:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Incident response &amp; threat detection</span></div><div><span style="font-size: 11px;">OT risk awareness &amp; industrial safety culture</span></div><div><span style="font-size: 11px;">Cross-functional leadership</span></div><div><span style="font-size: 11px;">Cybersecurity governance</span></div><div><span style="font-size: 11px;">Continuous improvement &amp; automation</span></div>

IT/OT SOC Manager

Explore 2546+ Incident response manager in Dubai this November. Find roles across top companies and apply now to boost your career.