Administration - Information Security (UAE National) Emaratech

Administration Information Security is responsible for identifying, assessing, and mitigating vulnerabilities within an organization's information systems and networks. This involves using a combination of tools and methodologies to scan, test, and analyse systems for potential vulnerabilities that could be exploited by cyber attackers. The goal is to enhance the security posture of the organization by proactively identifying security weaknesses and recommending appropriate remediation measures.

Conduct Vulnerability Assessments:

• Perform regular and ad-hoc vulnerability scans across various systems and networks

• Utilize automated tools and manual testing techniques to identify security vulnerabilities

Analysis and Reporting:

• Analyse vulnerability scan results to distinguish between false positives, exploitable vulnerabilities, and non-critical issues.

• Prepare detailed reports and dashboards that highlight the findings, including risk ratings and potential impacts.

Remediation and Mitigation:

• Work closely with IT teams to recommend mitigation and remediation strategies for identified vulnerabilities.

• Follow up on remediation efforts to ensure vulnerabilities are properly addressed

Security Research:

• Stay updated with the latest security trends, vulnerabilities, and threat intelligence.
• Research new tools, techniques, and best practices in vulnerability assessment and management.

Collaboration and Communication:

• Collaborate with other security team members, including security architects and AppSec engineers, to enhance overall security.
• Communicate effectively with both technical and non-technical stakeholders to explain vulnerabilities and the importance of security measures.