JOB DESCRIPTION / ROLE
To conduct incident response and investigations related to cyber security incidents affecting EITC systems and services. The key functions of this role include timely incident response and effective incident handling, malware analysis and digital forensics analysis, acquisition and preservation of evidence, evidence source identification, incident analysis, formulating investigative and incident mitigation strategies.
Duties include: Performing, reviewing and assisting with technology specific investigations, incident analysis and handling, and the production of credible, detailed technical and executive incident reports as may be required.
The Incident Response and Investigations Specialist will also be required to conduct research on new security technologies and perform the implementation of leading computer security and protection technologies within the SIRT environment as may be required.
REQUIREMENTS
Minimum Experience:
• 10 years of experience with at least 5 years' experience preferably within a SOC or incident response team in a Telecommunication Industry
• Solid experience in programming, data analytics, SQL Queries and automation
• Knowledge of major scripting languages such as Perl, Ruby, Java, Python, PowerShell and other similar languages
• Solid experience in Storage, Network, DNS and Elastic Search databases.
• Solid knowledge of malware delivery techniques, indicators of compromise. Threat information sharing platforms.
• Solid static, dynamic malware analysis & sandboxing and excellent knowledge of reverse engineering techniques.
• Excellent experience with tools and analysis techniques used to analyse network, system and application logs
• Good knowledge of pen testing and data exfiltration techniques.
• Good knowledge of threat intelligence, and OSINT.
• Applied technical incident response, handling and mitigation experience
• Applied Ethical Hacking experience
• Solid, hands-on security knowledge of various operating systems and business applications
• Solid, hands-on security knowledge of various databases and web servers.
• Solid knowledge of TCP/IP networks, VoIP, firewalls, encryption, IDS/IPS/HIDS, web filtering, authentication and authorization technologies
• Good understanding of computer investigation processes and controls
• Previous Experience implementing information security related technologies.
• Good understanding of cyber security laws and regulations
• Previous Experience working on Fraud related cases is a plus.
• Experience in supervising a team of junior incident responders.
Minimum Education:
• Bachelor Degree in Computer Science, Information Security, or equivalent combination of education in Information Technology/Systems
• Professional certifications related to Information Security, Incident Response & Malware Analysis.
Knowledge & Skills:
• Communication, teamwork and negotiation skills.
• Problem-solving and good analytical skills.
• Ability to work to tight deadlines under pressure.
• Willingness to learn about new developments.
• Up-to-date knowledge of information security trends, related business processes, standards, emerging threats and vulnerabilities to information and information assets
• Good understanding of computer investigation processes and controls
• Reliable, self-starter and capable of working on own initiative and/or as part of a team.
• Skills of Vendor management.
• Familiar with IETF, OASIS, NIST, NSA Security Guidelines, SANS references etc.
• Ability to work creatively and analytically in a problem-solving environment.
ABOUT THE COMPANY
du is the new telecommunication services provider in the UAE. We are an integrated service provider offering voice, data, video and content services over fixed and mobile networks to residential and business customers.
du has three broad target segments:
Consumers: Focusing on individuals and households by offering mobile and fixed voice calling, Internet, data services and television. Businesses: Focusing on small to very large corporations and government agencies by offering integrated fixed and mobile business solutions including voice, data, content and applications as well as professional services.
Carriers: Focusing on providing carrier, international data networks and wholesale services to international operators, multinational corporations and telecom carriers.
The needs of our customers are our primary focus. Our aim is to provide new and innovative services that deliver a better customer experience.
