Senior Security Engineer Group 42

Responsibilities:

Functional:

- Manage core security products and infrastructure components across domains including Cloud Native Security, Application & Host Security, Infrastructure Defense and Vulnerability Assessments.

- Work with security operations and red teams to design and develop appropriate security monitoring solutions, including understanding attacks through attack trees and recognizing threats via indicators.

- Coordinate and conduct event collection, log management, event management, compliance automation and identity monitoring activities using SIEM technologies.

- Research, analyze and understand log sources utilized for security monitoring and identify areas of improvement within existing processes, procedures and documentation.

- Develop, implement and execute standard procedures for administration, content management, change management, version/patch management and lifecycle management of the SIEM/Log Management platforms.

- Support day-to-day event parsing, correlation and detection, including creation of log source extensions and flow management.

- Liaise with threat intelligence and SOC team members to implement detection of current and changing threat landscapes to improve the security posture of G42’s existing platforms.

- Identify opportunities to improve G42's security architecture & capabilities and drive changes that meet business objectives which are compliant with regulatory requirements.

- Create innovative solutions to automate and reduce the timeframes for security operations and periodically perform architectural review for existing systems.

- Educate and advise business and technical leaders on the development, delivery and management of cloud security solutions and report information security incidents through G42's established incident reporting channels.

- Manage product enhancement feature requests with vendors as required while continuously evaluating and recommending new and emerging security products and technologies.

- Perform all administration, management, configuration, testing and integration tasks related to the SIEM platform.

Qualifications:

To qualify, you must have

- Bachelor’s Degree in Computer Science, Information Technology, Engineering or related field

- Relevant Certifications including SIEM platform, SOAR, and Vulnerability Management

- Minimum 5 years of experience in system security

- At least 2 years of experience in cloud information security  

Ideally, you’ll also need 

- Extensive knowledge of cloud and security technologies

- Knowledge of local and international security policies and regulations

- A passion for troubleshooting and problem-solving