Manager - Cyber Security

Advanced Search; Manama; Vor Ort; BHD 32.000 - 52.000; Vollzeit

Zusammenfassung

Advanced Search in Bahrain seeks a Senior Cyber Security Lead to oversee security operations, vulnerability management, cloud and on-prem security, and security automation. You will implement controls, ensure compliance with standards, strengthen threat detection and incident response, and embed secure practices across technology operations to protect assets.

The role requires designing PAM strategies, hardening guidelines, automation via Python, managing the vulnerability program, monitoring

Qualifikationen

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• Master's degree preferred.
• Certifications such as CISSP, CISM, CEH, CompTIA Security+ or equivalent.

Aufgaben

• Lead and manage cyber security operations, vulnerability management, cloud and infrastructure security, and security automation.
• Implement effective security controls and ensure compliance with cyber security standards.
• Strengthen threat detection and incident response capabilities and embed secure practices across technology operations.
• Conduct thorough security audits to identify vulnerabilities and implement improvements.
• Create and maintain PAM strategies to protect sensitive resources.
• Design and deploy automated processes for cybersecurity tasks using Python.
• Oversee vulnerability management program, including scanning, remediation, and reporting.
• Monitor and maintain security tools such as SIEM, IDS/IPS, DLP, and endpoint protection.
• Collaborate with IT, DevOps, and other teams to embed security in the SDLC.

Kenntnisse

Threat Detection

Vulnerability Management

PAM

Security Automation

DevSecOps

Security Hardening

Cloud Security

Network Security

Endpoint Security

SIEM

Ausbildung

Bachelor's degree in CS/IT/Cybersecurity

Master's degree preferred

Tools

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Defender for Cloud

Microsoft Defender for Endpoint

Nessus

Qualys

OpenVAS

Wallix

CyberArk

BeyondTrust

Python

Splunk Phantom

Cortex XSOAR

Azure Sentinel

SonarQube

GitHub Actions

AWS CodePipeline

CIS Benchmarks

SITG Benchmarks

Qualys Policy Compliance

AWS Security Hub

Azure Security Center

Microsoft Defender for Cloud

Palo Alto Networks

Fortinet

Cisco ASA

Snort

Suricata

CrowdStrike Falcon

SentinelOne

Jobbeschreibung

Lead and manage the organization s cyber security operations, vulnerability management, cloud and infrastructure security, and security automation activities by implementing effective security controls, ensuring compliance with cyber security standards, strengthening threat detection and incident response capabilities, and embedding secure practices across technology operations to safeguard organizational systems, applications, and information assets.

Conduct thorough security audits to identify vulnerabilities and implement actionable improvements.

Develop and enforce robust Privilege Access Management (PAM) strategies to protect sensitive resources.

Create and maintain Security Hardening Guidelines in compliance with CIS or SITG Benchmarks, ensuring secure configurations across all systems.

Design and deploy automated processes for cybersecurity tasks using Python scripting.

Manage the organization s Vulnerability Management Program, including regular scanning, assessment, remediation, and reporting.

Implement and oversee Security Automation processes to streamline threat detection, incident response, and compliance checks.

Continuously monitor security systems to detect, respond to, and resolve potential incidents promptly.

Respond to cybersecurity incidents with effective containment, resolution, and detailed after-action reporting.

Collaborate with IT, DevOps, and other teams to embed security practices into all phases of the SDLC.

Monitor and maintain security tools such as SIEM, IDS/IPS, DLP, and endpoint protection solutions.

Oversee the design, implementation, and management of security architectures for cloud-based and on-premise infrastructures.

Perform periodic reviews of firewall configurations, user access controls, and other security mechanisms to optimize protection.

Maintain the organization s cybersecurity framework and ensure alignment with industry standards and regulations.

Proactively evaluate and deploy emerging cybersecurity technologies to mitigate evolving threats.

Act as the primary contact for security incidents and collaborate with external teams for escalated support.

Provide leadership in implementing threat intelligence strategies, ensuring continuous improvement of the organization's security posture.

Skills & Technologies Required

• Threat Detection and Response using any of these tools (Microsoft Defender XDR, Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft Defender for Endpoint).
• Vulnerability Management using any of these tools (Nessus, Qualys, OpenVAS).
• Privilege Access Management (PAM) using any of these tools (Wallix, CyberArk, BeyondTrust).
• Security Automation and Orchestration using any of these tools (Python, Splunk Phantom, Cortex XSOAR, Azure Sentinel ).
• DevSecOps using any of these tools (SonarQube, GitHub Actions, AWS CodePipeline).
• Security Hardening and Compliance using any of these tools (CIS Benchmarks, SITG Benchmarks, Qualys Policy Compliance).
• Cloud Security using any of these tools (AWS Security Hub, Azure Security Center, Microsoft Defender for Cloud).
• Network Security using any of these tools (Palo Alto Networks, Fortinet, Cisco ASA, Snort, Suricata).
• Endpoint Security using any of these tools (Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne).

Desired Candidate Profile

Qualifications

Bachelor s degree in Computer Science, Information Technology, Cybersecurity, or a related field (Master s degree preferred).

Relevant certifications such as CISSP, CISM, CEH, CompTIA Security+, or equivalent.

Experience

A minimum of 6 years of experience in the related field.