Job closed
Ref: HP332-433
Job description / Role
The purpose of this position is to conduct Security assessment and develop security design of solutions that are deployed in the du network for business and support services. The key objective of the profile is to ensure du Telecom and IT network is secured and protected from any intrusions and hack attempts. The Security assessment includes prescribing information security controls for all du Services/Applications & Infrastructure as per International standards (3GPP, ITU- x.805) and regulatory directives, within a specified scope. The assessment is for protection of the du mobile services & infrastructure from internal & external security threats. The position is required to deliver security projects within agreed timelines and manage the handover of deployed security solutions/controls to the respective operations teams.
Requirements
Minimum Experience:
• Minimum 8-10 years of experience in a similar role in telecommunication industry
• Security Certification CEH/CHFI/ISO27001/CISSP/CISM compared with experience (CISSP-CISM with 4 years / course completion with no certification requires 4-6 years of experience
• Must contain strong knowledge and experience in Security Planning of state-of-the-art technologies; VoLTE, LTE, 2G/3G, Femtocell, GTP & SCTP Inspection, Secure Online Transactions
• In Depth knowledge and work experience in Data Center, Telecom Core network design
• In Depth knowledge and work experience on Application and Data/Information Security, OWASP, OSTTM
• Good understanding of technical aspects relating to the mobile Telecom Security; RAN, PS-Core, CS-Core, VAS, OSS, IN, IT/BSS
Minimum Qualifications:
• Bachelors of engineering degree in electronics and communication or computers or electrical and electronic or similar
• Bachelor's degree with non engineering background is considered by calculating the experience.
• Master in security
• Certifications such as Firewall Associate, ITIL, Systems Engineer
Knowledge & Skills:
• Security controls, control systems, and business drivers that affect security controls.
• Security regulation and standard compliance management (ISO series, PCI/DSS, etc.)
• Good knowledge on the following standards ISO 27xxx/BS7799, ISO 18028 (ITU-T X.805), ITU-T X.1051 (ISO 27011) and PCI/DSS
• Security risk assessments, audits, penetration tests and vulnerability assessments.
• Reliable, self-starter and capable of working on own initiative and/or as part of a team.
• Ability to work creatively and analytically in a problem-solving environment.
• Good at communicating both to the security team and to non technical teams.
• Excellent writing skills, communication (written and oral) and interpersonal skills.
• Skills of Vendor management.
• Awareness of business and commercial issues.
• Proficient communication and negotiation skills
• Fluent in English
• Familiar with IETF, OASIS, NIST, NSA Security Guidelines, SANS references etc.
• Extensive and wide technical expertise in technologies such as Content Security (WAF, Anti-X), Infrastructure Security (FW,VPN,IDS/IPS), Strong Authentication (2-Factor Authentication, Single-Sign-On, ...), Endpoint Security, Data Leak Prevention, Security events monitoring, Vulnerability/Patch Management, WLAN, VoIP etc.
• Profound knowledge on switching and routing security, including L2/L3 IP MPLS
• Profound knowledge on basic services, such as DNS, DHCP, AAA, Syslog, NTP, etc.
About the Company
du is the new telecommunication services provider in the UAE. We are an integrated service provider offering voice, data, video and content services over fixed and mobile networks to residential and business customers.
du has three broad target segments:
Consumers: Focusing on individuals and households by offering mobile and fixed voice calling, Internet, data services and television. Businesses: Focusing on small to very large corporations and government agencies by offering integrated fixed and mobile business solutions including voice, data, content and applications as well as professional services.
Carriers: Focusing on providing carrier, international data networks and wholesale services to international operators, multinational corporations and telecom carriers.
The needs of our customers are our primary focus. Our aim is to provide new and innovative services that deliver a better customer experience.