Incident Response Senior Specialist

الوصف الوظيفي
As a bold global technology leader, our products and services touch the lives of millions, as well as lending a huge helping hand to some of the country’s most crucial organisations. From contactless payments to connecting emergency services, our technology delivers some truly exciting initiatives, not to mention the incredible connections we make on a global level every single day. We rely on the brightest sparks to help us deliver new innovations. So if you believe, like we do, that technology can help us imagine, create and realise a more connected future – then we need you to help us achieve that goal! We’re focused on building the best network, providing a knockout digital experience and giving back the very best to our customers. Not bad for a company you thought was just a mobile network provider, right? We’re here to prove we’re no one trick pony and our technology reach goes way further than you imagined. Read on to find out just how far....

With us you will:

This role is responsible for performing Incident Response activities and cybercrime investigations on behalf of Vodafone. They will be responsible for the delivery of services relating to cyber-attacks and data breach investigations; including complex and at times sensitive work streams. They will also be responsible for aspects of internal corporate security investigations, e-Discovery and network investigations.  There will be the need to generate reports to satisfy the requirement of senior stakeholders, technical specialists and regulatory bodies. There may also be the requirement to produce evidential witness statements for use in court or tribunal proceedings. The day to day will focus on two areas: Security Notifications and Incident Response. As part of Security Notifications, the role aims to track the presence and remediation of severe vulnerabilities across Vodafone Infrastructure. Within the Incident Response activity, the role aims to assess, investigate and resolve security incidents whilst supporting the CSOC

Incident Response Investigation – Forensic, technical, root cause analysis and incident response to defeat cyber-attacks and reduce risk. Recommendation of containment, remediation and recovery activities.
The role holder will work extensively with all our (internal) Customers being cyber security team to counter cyber-attacks and to facilitate the skills transfer between Vodafone operating companies.
The role holder will be expected to be able to coordinate work with security vendors in the development and improvement of security platforms and services for monitoring and analysis.
The role holder will contribute to the development of an intelligence-led framework to protect Vodafone against risk including advanced malware and attacks (APTs)
Managing the Threat Intelligence and Threat hunting activities and updating Cyber Security Management.
Accurate, threat driven and timely understanding of the programmatic aspects with the Red Team and routinely adopt methods of adversaries, leverage the understanding of attacks on other organizations.
Conduct security attacks on internally /externally hosted applications and infrastructure within a global scope focusing on critical functions.
Customize and implement procedures that evade IT controls to successfully validate a compromise of how acts of deliberate disruption can create adverse/unspecified financial loss and negative impact.
المهارات
Apply if you have:

Bachelor’s degree in CS, Telecom/Data/ Computer Networking Engineering or any relevant domain.
At least 7 years of proven experience working in Information Services
Minimum 4 Years of experience in Telecom sector.
Strong understanding of the end to end Vulnerability Management process and related industry standards, such as CVE, CVSS. Knowledge of methodologies and frameworks like OWASP, OSSTMM, MITRE would be a plus
Experience in Vulnerability Assessment, Penetration Testing and Red Teaming activities, either as an operational or as a coordinator. Experience in Threat Intelligence & Threat Hunting would be a plus
Knowledge of the main Vulnerability Scanning tools and experience in the interpretation/analysis of their results
Experience working in complex organizations reporting to senior and challenging stakeholders
Knowledge of Diameter and SS7 Vulnerabilities Management will be a plus.
Professionally qualified in cyber security (such as GIAC, CREST, ISC(2), ISACA)
Experience on SIEM, SOAR & EDR platforms is mandatory.
تفاصيل الوظيفة
منطقة الوظيفة الدوحة, قطر
قطاع الشركة الاتصالات والشبكات
طبيعة عمل الشركة صاحب عمل (القطاع الخاص)
الدور الوظيفي --
نوع التوظيف --
الراتب الشهري غير محدد
عدد الوظائف الشاغرة 1
المرشح المفضل
المستوى المهني متوسط الخبرة
عدد سنوات الخبرة الحد الأقصى: 7
الشهادة بكالوريوس/ دبلوم عالي

https://www.bayt.com/ar/qatar/jobs/incident-response-senior-specialist-4450144/