• Manage and optimize the enterprise SIEM environment. Develop, tune, and maintain correlation rules, dashboards, and automated alerts to ensure the rapid identification of anomalous network and user behaviour.

• Deploy, manage, and monitor Endpoint Detection and Response (EDR) solutions across the organization. Investigate endpoint alerts, isolate compromised hosts

• Manage Web Application Firewalls (WAF) to protect public-facing applications from web-based attacks. Tune and monitor Intrusion Detection and Prevention Systems (IDS/IPS) to block malicious network traffic.

• Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.

• Design computer security strategy and engineer comprehensive cybersecurity architecture.

• Develop and implement user awareness policies and procedures.

• Apply the required HSE (Health & Safety) regulations.

Requirements

• Bachelor degree of Computer Science 

• (Certified (CISSP, CEH, CISM, Security+).

• Proven work At least 2-year experience as a System Security Engineer or Information Security Enginee

• Hands-on experience with SIEM Elastic Search

• Ability to write queries (e.g., KQL, EQL) to search through massive log datasets. 

• Experience parsing logs, creating data visualizations, and building custom threat detection rules.

• Operational experience with enterprise EDR platforms

• Ability to analyse process trees, memory alerts, and registry changes to identify malware or unauthorized access.

• Understanding of the OWASP, MITTER Attack

• Experience running vulnerability scanners

• Experience on integrate SIEM to other security tools like EDR / Forti