business analyst

financial analyst

operational risk manager

treasury analyst

bi analyst

it risk threat analyst

B&S Group

<div><b>Company Description</b><p><b><br>
This is B&amp;S</b></p><p>
B&amp;S exists to make premium consumer goods available to everyone, anywhere. We believe that getting access to consumer products that bring joy and comfort into everyday lives, should be easy around the globe.</p><p>
Are you curious about who we are as an employer and our thoughts on diversity and inclusion? Click here to find more information!</p><b><br>
Job Description</b><p><br>
We are looking for an IT Risk and Threat Analyst to support the IT risk management practice, ensuring that risks are proactively identified, mitigated, communicated, and monitored. The role involves recommending appropriate and effective management processes across all aspects of information technology for B&amp;S. The analyst will also analyze cyber-threats, identify patterns in cyber-attacks, and report on emerging cyber-threat trends. This position requires close collaboration with IT, Security, Risk, and Business teams to enable data-driven risk management and strengthen overall cybersecurity posture.<br>
<br>
<b>Key Responsibilities</b></p><ul><li>
Work closely with other technical, incident management, and security analysts to develop a fuller understanding of cyber threat actor&rsquo;s intent, objectives, and activities of cyber threat actors and define a world-class cyber defense program.</li><li>
Conduct research and evaluate technical and all-source cyber intelligence to develop in-depth assessments of threats to the organization&rsquo;s networks, systems, users, and data.</li><li>
Ensure effective execution of the risk management framework by managing relationships with key stakeholders within strategic business groups and technology.</li><li>
Verify that IT risks are appropriately mitigated and lead multiple stakeholders in agreement on appropriate solutions/controls</li><li>
Create technical assessments and cyber threat profiles of current events based on the inventive collection and research using classified and open information sources to enable advanced threat intelligence</li><li>
Develop, track, and report on Key Risk Indicators (KRIs) for information technology.</li><li>
Monitor, track, and report mitigation and resolution of IT risks.</li><li>
Perform process-level walkthroughs, control testing, etc. for the identification and assessment of IT risks and controls.</li></ul><p></p><b><br>
Qualifications</b><br>
<ul><li>
Have a bachelor&rsquo;s degree in IT or computer science.</li><li>
Have 5+ years of IT experience within a similar role.</li><li>
Have professional certifications like CISSP, CISM, CISA, or CRISC.</li><li>
Understand key technology concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps.</li><li>
Have a strong knowledge of IT organization business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns).</li><li>
Have a strong communication skill to work effectively with employees at all levels of the organization.</li><li>
Have excellent problem-solving skills and the ability to be highly productive, working alone and as part of a team.</li></ul><br>
<b>
Additional Information</b><p><b><br>
We offer you</b></p><ul><li>
A good salary fitting with your experience, and a discretionary yearly performance-based bonus</li><li>
A good working atmosphere in a young and ambitious team.</li><li>
Company sponsored visa along with health insurance.</li><li>
Leave benefits as per UAE labour law.</li><li>
Annual air-ticket to your home country</li></ul><p><b>
Why join us?</b></p><ul><li>
Be part of a multinational and multicultural company.</li><li>
Dynamic, multicultural environment fostering innovation and professional growth.</li><li>
Opportunity to contribute to high-impact financial strategies.</li></ul><p><b>
Where will you be working?</b><br>
You will be working in our Dubai office, where you will benefit from the guidance and support of our diverse team. Alongside your responsibilities, you will have the opportunity to immerse yourself in a collaborative culture that emphasizes teamwork, creativity, and a strong work ethic.</p></div>

IT Risk & Threat Analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

Control Risks

<p>We are seeking Analysts of all levels to deliver high quality reporting, covering but not limited to areas around security-risk, intelligence, operations, and political risk.</p> <p>Areas of expertise we are looking to engage in are as follows:</p> <p> <strong>1. Intelligence Analyst</strong> </p> <p>Gather and evaluate information from different sources to predict and prevent organised crime activities. The use of law enforcement databases, surveillance, intelligence networks, and geographic information systems to predict crimes.<br> </p> <p> <strong>2. Security Analyst</strong> </p> <p>Conducting security assessments through vulnerability testing and risk analysis. Performing both internal and external security audits. Analysing and identifying security breaches, continuously updating company incident response and disaster recovery plans.<br> </p> <p> <strong>3. Political Analyst</strong> </p> <p>Examine and analyse issues such as economic conditions, crime levels, threat of conflict, government stability and governance, trade and regulations, or humanitarian and human rights issues.<br> </p> <p> <strong>4. Operations Analyst</strong> </p> <p>Review data which implicates an organisation s policies, procedures, and functions. Reviewing company data in correlation with data sources, to build reports based on these findings and recommending programmes to improve an organisation's performance.</p><p> <strong>Required Skills</strong> </p> <ul> <li>A minimum bachelor s degree in history, political science, international relations, intelligence analysis, criminal justice, regional studies, or a related discipline; master s degree strongly preferred</li> <li>Minimum 1-2 years of experience </li> <li>Broad knowledge of geopolitical affairs, and global awareness of influences on business goals and strategies</li> <li>Attention to detail, with the ability to anticipate trends which may have an impact on the organisation, extending to environment and people</li> <li>Ability to interpret high volumes of data, from multiple sources</li> <li>The ability to compile concise and accurate reporting, using the appropriate language for its audience</li> <li>Work well under pressure in moments of emergency response </li> <li>Responsive to changing environments and adaptable to unpredictable circumstances </li> <li>Strong client focus and the ability to build and maintain relationships</li> <li>Excellent research, analytical, writing, and verbal presentation skills</li> <li>Excellent IT skills, in MS office, and confident to learn new systems</li> <li>Additional ad hoc requests</li> <li>Dual linguistic skills are favoured but not essential </li> </ul> <p> <strong>Behavioural Skills</strong> </p> <p> </p> <ul> <li>A team player who works professionally with colleagues and stakeholders at all levels</li> <li>An excellent understanding of client and business confidentiality </li> <li>Cultural awareness and ability to work alongside a global team</li> <li>Proactive and confident in articulating ideas with peers across the organisation</li> <li>Ability to demonstrate resilience and perseverance in difficult situations</li> <li> </li> </ul>

Analyst - Speculative

Accenture

<div><span style="font-size: 11px;"><b>Job Summary:</b></span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">The IT/OT SOC Delivery Lead is responsible for managing and delivering security operations across both IT (Information Technology) and OT (Operational Technology) environments. This role ensures comprehensive threat detection, response, and monitoring capabilities for corporate systems and industrial control systems (ICS/SCADA). The ideal candidate has deep knowledge of cybersecurity frameworks, IT/OT convergence challenges, and a proven track record in leading SOC operations in critical infrastructure sectors.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;"><b>Key Responsibilities:</b></span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">SOC Management &amp; Delivery:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Lead end-to-end delivery of SOC services for both IT and OT environments, including 24/7 monitoring, detection, and incident response.</span></div><div><span style="font-size: 11px;">Manage a team of SOC analysts, threat hunters, and incident responders aligned with both IT and OT domains.</span></div><div><span style="font-size: 11px;">Oversee SOC operational processes, including alert triage, escalation, incident handling, and post-incident reviews.</span></div><div><span style="font-size: 11px;">Ensure efficient service delivery by managing SLAs, KPIs, and continuous improvement metrics.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">IT/OT Cybersecurity Integration:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Drive alignment between IT and OT security operations to support a converged cyber defense strategy.</span></div><div><span style="font-size: 11px;">Collaborate with IT, OT, engineering, and plant operations teams to ensure risk-based visibility and protection.</span></div><div><span style="font-size: 11px;">Lead integration of data sources from ICS, SCADA, DCS, PLCs, HMIs, and enterprise IT infrastructure into SIEM/SOAR platforms.</span></div><div><span style="font-size: 11px;">Develop and refine OT-specific detection use cases and playbooks tailored to industrial threats.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Threat Intelligence &amp; Response:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Monitor evolving threats, vulnerabilities, and attack vectors targeting both IT and OT systems.</span></div><div><span style="font-size: 11px;">Lead proactive threat hunting and analysis activities across IT/OT landscapes.</span></div><div><span style="font-size: 11px;">Coordinate incident response activities including containment, investigation, recovery, and root cause analysis.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Governance &amp; Compliance:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Ensure adherence to industry standards and regulatory frameworks such as NIST CSF, IEC 62443, ISO 27001, and NERC CIP.</span></div><div><span style="font-size: 11px;">Support audits, risk assessments, and cyber resilience exercises involving IT/OT infrastructure.</span></div><div><span style="font-size: 11px;"><b><br></b></span></div><div><span style="font-size: 11px;"><b>Required Qualifications:</b></span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Bachelor's degree in Cybersecurity, Engineering, Computer Science, or a related field.</span></div><div><span style="font-size: 11px;">14+ years of experience in cybersecurity operations, with at least 10 years in a leadership role covering both IT and OT domains.</span></div><div><span style="font-size: 11px;">Strong knowledge of IT security practices, SOC operations, and ICS/SCADA/OT systems.</span></div><div><span style="font-size: 11px;">Experience with SIEM, SOAR, EDR, IDS/IPS, and network security tools (e.g., Splunk, QRadar, Sentinel, Nozomi, Dragos).</span></div><div><span style="font-size: 11px;">Familiarity with protocols and systems common in OT (e.g., Modbus, DNP3, OPC, Siemens, Rockwell).</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Preferred Qualifications:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Relevant certifications: CISSP, GICSP, GCIA, SANS ICS410/515, CISM, or equivalent.</span></div><div><span style="font-size: 11px;">Experience in oil &amp; gas, utilities, energy, or other critical infrastructure sectors.</span></div><div><span style="font-size: 11px;">Strong leadership, communication, and stakeholder management skills.</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Key Competencies:</span></div><div><span style="font-size: 11px;"><br></span></div><div><span style="font-size: 11px;">Incident response &amp; threat detection</span></div><div><span style="font-size: 11px;">OT risk awareness &amp; industrial safety culture</span></div><div><span style="font-size: 11px;">Cross-functional leadership</span></div><div><span style="font-size: 11px;">Cybersecurity governance</span></div><div><span style="font-size: 11px;">Continuous improvement &amp; automation</span></div>

IT/OT SOC Manager

help AG

<div><p>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist (U.A.E National) who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li><p>
Lead incident response engagements in unknown environments until all threats are remediated.</p></li><li><p>
Develop custom incident response plans tied to specific environments and customer situations.</p></li><li><p>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</p></li><li><p>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</p></li><li><p>
Reverse engineer malicious software and develop signatures and indicators of compromise.</p></li><li><p>
Actively develop incident response tools, scripts, and various detection content.</p></li><li><p>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</p></li><li><p>
Articulate and execute common Incident Response methods (e.g. SANS).</p></li><li><p>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</p></li><li><p>
Work on-site as required with clients during Live Security Incidents.</p></li><li><p>
Maintain a high degree of awareness of the current threat landscape.</p></li><li><p>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</p></li><li><p>
Create and present customer reports to ensure quality, accuracy and value to the client.</p></li><li><p>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</p></li><li><p>
Perform other essential duties as assigned.</p></li></ul><p></p><p><b><br>
Qualifications &amp; Skills:</b></p><p></p><ul><li><p>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</p></li><li><p>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</p></li><li><p>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</p></li><li><p>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</p></li><li><p>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</p></li><li><p>
Should have <b>at least</b> one of the below <b>ACTIVE </b>certifications as a mandatory requirement:</p></li></ul><p>
CREST Certified Registered Intrusion Analyst (CRIA)<br>
GIAC Cloud Forensics Responder (GCFR)<br>
GIAC Certified Forensic Analyst (GCFA)</p><p>
CREST Certified Host Intrusion Analyst (CC-HIA)<br>
CREST Certified Network Intrusion Analyst (CC-NIA)</p><p>
CREST Certified Incident Manager (CC-IM)</p><p>
CREST Certified Threat Intelligence Manager (CC-TIM)<br>
GIAC Reverse Engineering Malware (GREM)</p><ul><li><p>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</p></li><li><p>
Deep TCP/IP knowledge, networking and security product experience.</p></li></ul><ul><li><p>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</p></li><li><p>
Rapid development in scripting languages: Python/PowerShell /Bash.</p></li><li><p>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</p></li><li><p>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</p></li><li><p>
Demonstrable experience in analysing and interpreting system, security and application logs.</p></li><li><p>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</p></li><li><p>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</p></li><li><p>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</p></li><li><p>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</p></li></ul><p></p><p><b>
Benefits:</b></p><p></p><ul><li><p><br>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/Hybrid working environment.</p></li><li><p>
Open door policy.</p></li></ul><p></p><p><b><br>
About Us:</b></p><p></p><p><br>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Incident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)

Confidential Company

<p><strong>Job Purpose</strong></p><br/><p>To design, implement, manage, and monitor the organization cybersecurity infrastructure. This role is  responsible for protecting information systems, networks, and data from cyber threats by identifying  vulnerabilities, managing risk, and responding to incidents effectively</p><ul><li><strong>Role and Responsibilities</strong></li></ul><br/><p><strong>Network Operations (NOC):</strong></p><br/><p>∙ Monitor network health and</p><p>infrastructure using tools like Nagios,</p><p>Zabbix, or SolarWinds.</p><p>∙ Respond to and escalate outages,</p><p>latency issues, or degradations.</p><p>∙ Perform system maintenance, including  patching, firmware updates, and</p><p>backups.</p><p>∙ Maintain incident logs, technical</p><p>documentation, and root cause reports.</p><p>∙ Ensure high availability and collaborate  with IT on network improvements</p><p><strong>Security Operations (SOC):</strong></p><p>∙ Monitor and triage alerts via SIEM tools  (Splunk, QRadar, Microsoft Sentinel).</p><p>∙ Conduct threat hunting using IOCs,</p><p>TTPs, and threat intelligence feeds.</p><p>∙ Investigate and respond to security</p><p>incidents, collect logs, and perform</p><p>forensic analysis.</p><p>∙ Utilize EDR tools (ESET, CrowdStrike,  Sentinel One,e.g.,) for endpoint threat</p><p>detection.</p><p>∙ Support vulnerability management with  tools like Nessus, Nmap, and Burp</p><p>Suite.</p><p>∙ Write detection scripts using Python,  Bash, or PowerShell.</p><p>∙ Collaborate with Red and Blue Teams  for attack simulations and security drills.</p><p>∙ Apply MITRE ATT&CK, NIST CSF, and  Zero Trust principles in threat defense</p><p>∙ Authority to access, monitor, and audit  any IT system or data as needed for</p><p>cybersecurity operations.</p><p>∙ Authority to block or isolate</p><p>compromised systems or user accounts  during incident response.</p><p>∙ Recommend or initiate upgrades and  changes to security infrastructure and</p><p>controls.</p><p>∙ Escalate cyber risk findings to</p><p>leadership, with decision-making power  during critical incidents</p>

Cyber Security Engineer

Explore 3380+ It risk threat analyst in Dubai this November. Find roles across top companies and apply now to boost your career.