Job Description

Roles & Responsibilities

Job Objective To safeguard organizational assets and ensure business resilience by leading proactive security monitoring, incident response, threat mitigation, and continuous improvement of cybersecurity operations. Environment Internal : GEPD management, plasma procurement, manufacturing, sales, finance, logistics and procurement. External : Vendors and governmental authorities. Key responsibility - Lead and coordinate security monitoring, threat detection, and incident response activities across IT and OT environments. - Protect industrial control systems and critical operational assets through continuous monitoring, threat analysis, and risk mitigation. - Monitor the security posture of industrial control systems (ICS), SCADA networks, and critical operational assets, identifying and escalating risks as required. - Prepare and present security reports, incident analyses, risk assessments, and operational metrics to management and key stakeholders. - Assess, prioritize, and track remediation of security vulnerabilities and control gaps within IT and OT environments. - Develop, maintain, and improve security monitoring use cases, detection rules, incident response playbooks, and operational procedures if required. - Collaborate with internal stakeholders and external partners to strengthen cyber resilience and ensure secure business operations. - Enhance security operations capabilities through process improvement, threat intelligence integration, and operational excellence. - Support compliance, audit, and regulatory requirements related to cybersecurity and critical infrastructure protection. Computing Skills Scripting and automation using Python, PowerShell, or Bash. Personal Skills Excellent verbal and written communication skills. Ability to multi-task in a fast paced, high-pressure environment. Quick Learner. Ability to interact effectively with employees at all levels. Strong attention to detail Strong analytical thinking skills Languages Excellent written and spoken English and Arabic

Desired Candidate Profile

Academic experience required

Bachelor's degree in computer science, Computer/Communication Engineering, Information Security or similar field

Professional Experience Required

• 5+ years of experience in cybersecurity, with 3+ years in a SOC or incident response role
• Hands-on experience in (SIEM) platforms specially Splunk and log analysis.
• Stronge knowledge of Endpoint Detection and Response (EDR/XDR) technologies.
• Stronge knowledge of Security monitoring, threat detection, and incident response.
• Good knowledge of Network security fundamentals, including TCP/IP, firewalls, IDS/IPS, VPNs, and network protocols.
• Good knowledge of Windows and Linux system administration and security.
• Good knowledge of Vulnerability assessment and remediation management.
• Stronge knowledge of Cyber threat intelligence analysis and threat hunting techniques.
• Stronge knowledge of Security incident investigation, root cause analysis, and digital forensics fundamentals.
• Good knowledge of Identity and Access Management (IAM) and Active Directory security.
• Good knowledge Cloud security concepts and monitoring for enterprise cloud environments.
• Knowledge of Operational Technology (OT), Industrial Control Systems (ICS), and SCADA security monitoring are highly preferred.
• Stronge knowledge of Security tool administration and tuning, including detection rule development.
• Stronge knowledge of Security reporting, dashboard development, and data analysis.
• Hands-on experience of at least two of the cybersecurity frameworks and standards below such as: NIST Cybersecurity Framework ISO/IEC 27001 IEC 62443 MITRE ATT&CK