Cyber Security Specialist

Emirates Flight Catering; Dubai; On-site; AED 240,000 - 360,000; Full time

Job summary

Emirates Flight Catering in Dubai is seeking a Cybersecurity Specialist to strengthen our security posture across the digital environment. You will lead threat mitigation, risk management, and incident response activities to protect information assets and ensure resilience.

The role involves conducting security assessments, developing policies, and coordinating with IT teams to secure infrastructure and applications. A strong background in IT security and relevant certifications are required.

Qualifications

• Bachelor’s degree in computer science, maths, or equivalent.
• Professional cybersecurity certifications (CompTIA Security+, CEH, CySA+).
• Minimum 5 years IT security experience across IT Audit, IT Risk, Cybersecurity.
• Experience in global organizations with complex/hybrid IT environments.
• Strong knowledge of on-premise and cloud IT infrastructure; BYOD, application development.
• Experience with IT GRC methodologies.

Responsibilities

• Conduct regular security and vulnerability assessments to identify risks.
• Develop incident response plans and protocols to minimize damage.
• Develop, implement, and enforce security policies and controls.
• Monitor network traffic for suspicious activity and early threat detection.
• Provide security awareness training to employees.
• Conduct code reviews and penetration testing of security systems.
• Use SIEM tools to centralize security data for monitoring.
• Prepare regular security status reports for compliance review.
• Collaborate with IT teams to secure infrastructure and applications.
• Provide input on security for new projects and systems.

Skills

Strong problem solving

Analytical

Time management

Interpersonal communication

Education

Bachelor’s degree in computer science or maths or equivalent

CompTIA Security+

CEH

CySA+

Tools

SIEM

Job description

Join our team and play a key role in maintaining EKFC's strong cybersecurity posture. The Cybersecurity Specialist will contribute to threat mitigation, risk management, and the protection of our digital assets, ensuring the security and resilience of our technology environment.

Key responsibilities:

• Conduct regular security and vulnerability assessments to identify and evaluate potential risks to information systems.
• Develop and implement effective incident response plans through established protocols to minimize damage and recovery time.
• Develop, implement, and enforce security policies, procedures and controls to protect the organization’s assets and ensure compliance with relevant regulations and standards (e.g., ISO27001, ISR, ICS and NESA).
• Monitor network traffic for suspicious activities for maintaining a secure environment and early threat detection
• Conduct security awareness training for employees to promote best practices for data security throughout the organization
• Conduct regular code reviews and penetration testing of various cybersecurity systems and applications for identifying vulnerabilities and improving software quality.
• Use security information and event management (SIEM) tools to provide a centralized view of security-related data and simplify monitoring and analysis.
• Prepare regular reports on security status and incidents for ongoing monitoring and review of compliance efforts.
• Collaborate with IT teams to secure infrastructure and applications tailored to the organization’s specific needs.
• Provide input on security implications for new projects or systems to ensure security considerations are integrated into the design and implementation phase.

Education Qualifications:

• Bachelor’s degree in computer science, Maths etc or equivalent
• Professional certifications in Cybersecurity (CompTIA Security+, Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+)

Work Experience:

• Minimum 5 years of IT Experience with extensive focus on IT Security covering IT Audit, IT Risk and Cybersecurity
• Must have worked in Information Security/Risk in a Global organisation with Complex/Hybrid IT Environment
• Strong knowledge of IT Infrastructure – both On Premise and Cloud, BYOD, Application development etc.
• Must have followed IT GRC Methodologies

Skills:

• Strong problem solving, analytical and time management skills
• Security Frameworks - ISO2700130000/CIS Critical security controls, NESA etc.
• Vulnerability Assessment and Penetration Testing (VAPT)
• IT Security/Cybersecurity
• ITSM and COBIT skills
• Strong interpersonal and communication skills.