Response, Monitoring Specialist

Description:

• Define, Refine and Maintain Threat Intelligence & Data loss protection mechanisms.
• Monitor and review and threat advisories from external sources (CBUAE, aeCert, VISA, Master, vendors etc.), coordinate strengthening of security controls as per Indicators of Compromise – IOCs.
• Evaluation of data leakage across email, web, printing, removable media, SFTP etc. including cloud services.
• Security information and event management SIEM) Administration, troubleshooting, devices and applications integration, monitoring and threat hunting.
• Create, maintain and provide support to bank’s CSIRT for information security incident, data breach handling and forensic investigations.
• Conduct Incident Response Readiness sessions in lines of fire evacuation drills, to deal with eventualities, especially post cloud enablement.
• With banking or consulting experience in setting up global security operations centres using HP, McAfee or IBM SIEM solutions. PAM Cyber Arc, Guardiam DAM, Tripwire N Circle (Vulnerability scan, CCN scan, FIN File integrity)
• Having hands on experience of working on one or more data loss prevention technologies (desired).